skills.rest
danilomartinelli
danilomartinelliCOMMUNITY
Explore all skills by this author →
Website𝕏@daniloleone429GitHub

vulnerability-scanner

Scan codebases, dependencies, and configurations for security vulnerabilities.

1|Updated Feb 19, 2026
Search Tags:#code review#security#vulnerability#owasp#dependency analysis#secrets#scanning
One-click install
npx skills add https://github.com/danilomartinelli/cursor-kit --skill vulnerability-scanner-danilomartinelli
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/danilomartinelli/cursor-kit/tree/main/skills/vulnerability-scanner
Command: npx skills add https://github.com/danilomartinelli/cursor-kit --skill vulnerability-scanner-danilomartinelli

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps identify and prioritize security vulnerabilities within a codebase, reducing the risk of breaches and ensuring compliance with security best practices.

Core Features & Use Cases

  • Dependency Analysis: Detects vulnerable third-party packages (OWASP A03).
  • Secret Detection: Finds hardcoded credentials and API keys (OWASP A04).
  • Code Pattern Scanning: Identifies dangerous coding practices (OWASP A05).
  • Configuration Review: Checks for common security misconfigurations (OWASP A02).
  • Use Case: Before deploying a new feature, run this scanner to ensure no secrets are exposed and that dependencies are up-to-date, preventing potential security incidents.

Quick Start

Run a full security scan on the current project directory.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for hardcoded secrets and API keys?▼

To scan for hardcoded secrets, run a full security validation on your project directory to detect exposed credentials and API keys, aligning with OWASP A04. This identifies sensitive data before deployment.

What is the best way to check dependencies for vulnerable third-party packages?▼

Checking dependencies for vulnerable packages involves auditing third-party libraries against known security flaws to ensure supply chain integrity. This process targets OWASP A03 vulnerabilities to help prioritize risk mitigation.

Can I detect security misconfigurations in my project files automatically?▼

Yes, you can detect security misconfigurations automatically by analyzing your project configurations. This automated review identifies common setup flaws mapped to OWASP A02, providing actionable insights for strengthening your deployment.

How do I identify insecure coding patterns before deploying a new feature?▼

Identifying insecure coding patterns requires scanning your codebase for dangerous practices that could lead to security incidents. This review targets OWASP A05 vulnerabilities, ensuring new features comply with security best practices.

Does the vulnerability scanner require any external tools to run?▼

The scanner utilizes Python scripts internally but also analyzes external tools for dependency auditing. It operates without requiring pre-installed dependencies, running directly on your current project directory to validate security.

Related Skills

Explore More Software Engineering Skills→
KeyValueSoftwareSystemsKeyValueSoftwareSystems
3

detect-stack

Identifies technology stacks by scanning manifests and source files, then installs matching Maestro skills and IDE configurations.

Official
Intermediate
nielsmadannielsmadan
1

review-security

Audit code for vulnerabilities, hardcoded secrets, and insecure patterns.

Community
Advanced
zebbernzebbern
4.5k

Top 100 Web Vulnerabilities Reference

Identify and contextualize web application vulnerabilities with OWASP-aligned remediation guidance.

Community
Basic
HouseGarofaloHouseGarofalo
3

security-auditor-agent

Audit application and infrastructure security against OWASP Top 10 and compliance frameworks.

Official
Advanced