vulnerability-scanner

Aggregate dependencies, secrets, code patterns, and configuration weaknesses into structured JSON.

Updated Aug 27, 2026

Search Tags:#vulnerability #owasp #threat-modeling #supply-chain #code-analysis #risk-prioritization #security-scanner

Ready to run

npx skills add https://github.com/bibekshrestha77/VehicleRent --skill vulnerability-scanner-bibekshrestha77

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/bibekshrestha77/VehicleRent/tree/main/VehicleRentingSystem/.agent/skills/vulnerability-scanner
Command: npx skills add https://github.com/bibekshrestha77/VehicleRent --skill vulnerability-scanner-bibekshrestha77

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

The vulnerability-scanner solves the challenge of systematically identifying and prioritizing security risks in software projects by applying OWASP 2025 principles, supply chain awareness, and attack-surface mapping to help teams focus remediation efforts.

Core Features & Use Cases

Automated scanning across dependencies, secrets, code patterns, and configuration for security risk signals.
Actionable findings with severity, impact, and remediation guidance to accelerate remediation.
Real-world use case: integrate into CI pipelines to continuously flag high-risk dependencies and insecure configurations before release.

Quick Start

Run a full security assessment on your project directory with python scripts/security_scan.py <project_path>.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I identify and prioritize security vulnerabilities in my software project?▼

To identify and prioritize security vulnerabilities, you can run an automated scan that aggregates dependencies, secrets, code patterns, and configuration weaknesses. The scanner outputs structured JSON with severity, impact, and remediation guidance based on likelihood and asset value.

Can I integrate vulnerability scanning into CI/CD workflows?▼

Yes, you can integrate vulnerability scanning into CI/CD workflows and ad-hoc audits. It continuously flags high-risk dependencies and insecure configurations before release, applying OWASP Top 10 2025 checks and supply chain integrity verification to your project.

How does risk-prioritization work for security scanning?▼

Risk-prioritization in security scanning works by quantifying identified vulnerabilities based on likelihood, impact, and asset value. This approach ensures your team focuses remediation efforts on the most critical security risks rather than treating all findings equally.

Does the scanner cover OWASP Top 10 2025 and supply chain threats?▼

Yes, the scanner covers OWASP Top 10 2025 and supply chain threats. It maps the attack surface by aggregating dependencies, secrets, code patterns, and configuration weaknesses to systematically identify security risks aligned with these standards.

What is the best way to automate remediation guidance for code analysis findings?▼

The best way to automate remediation guidance is to output structured JSON from your code analysis and vulnerability scans. This format provides actionable findings with severity and impact details, accelerating automated remediation and downstream processing.

Do I need any external dependencies to run a security scan?▼

No external dependencies are required to run a security scan. You can execute a full security assessment directly on your project directory using the included Python script, which requires no additional environment setup or external packages.