skills.rest
DaytimeBlues
DaytimeBluesCOMMUNITY
Explore all skills by this author →
GitHub

vulnerability-scanner

Scan project dependencies, secrets, code patterns, and configuration files for vulnerabilities.

Updated Jan 31, 2026
Search Tags:#code review#security#vulnerability#owasp#secrets#supply chain#scan
One-click install
npx skills add https://github.com/DaytimeBlues/ADHD-CADDI --skill vulnerability-scanner-daytimeblues
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/DaytimeBlues/ADHD-CADDI/tree/main/.agent/skills/vulnerability-scanner
Command: npx skills add https://github.com/DaytimeBlues/ADHD-CADDI --skill vulnerability-scanner-daytimeblues

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps identify and prioritize security vulnerabilities within a project, ensuring a more robust and secure software supply chain and codebase.

Core Features & Use Cases

  • Dependency Analysis: Scans project dependencies for known vulnerabilities (OWASP A03).
  • Secret Detection: Finds hardcoded secrets like API keys and passwords (OWASP A04).
  • Code Pattern Analysis: Identifies dangerous coding patterns that could lead to injection or other attacks (OWASP A05).
  • Configuration Review: Checks for common security misconfigurations (OWASP A02).
  • Use Case: Before deploying a new feature, run this Skill to automatically scan for critical vulnerabilities in dependencies, detect any accidentally committed API keys, and flag insecure coding practices.

Quick Start

Run a full security scan on the current project directory.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my code for hardcoded secrets and API keys before deployment?▼

To scan for hardcoded secrets, this Skill automatically checks your project files for API keys and passwords. It flags committed secrets so you can remove them before deploying a new feature.

Can I check project dependencies for known vulnerabilities automatically?▼

Yes, you can check dependencies by running a full security scan on your project directory. The dependency analysis identifies known vulnerabilities in your supply chain, addressing OWASP A03 risks.

Does this vulnerability scanner require any external security tools or frameworks?▼

No external security frameworks are required. The scanner runs on Python 3 using standard libraries and requires subprocess execution capabilities to perform automated security checks.

What is OWASP Top 10 coverage included in an automated security scan?▼

The OWASP Top 10 coverage includes scanning for injection, cryptographic failures, security misconfiguration, hardcoded secrets, and supply chain vulnerabilities. It maps dangerous code patterns to these risks.

How do I find insecure coding patterns and configuration issues in my project?▼

To find insecure patterns, the scanner analyzes your codebase for dangerous coding practices and reviews configuration files for common security misconfigurations. It flags these issues for remediation.

Can I run a full security scan on an existing project directory without setup?▼

Yes, you can run a full security scan on the current project directory without setup. The scanner uses Python 3 standard libraries to check dependencies, secrets, code patterns, and configurations.

Related Skills

Explore More Software Engineering Skills→
arroschavesarroschaves
1

vulnerability-scanner

Scan code dependencies, secrets, patterns, and misconfigurations for vulnerabilities.

Community
Advanced
sugarforeversugarforever
131

Python Security Scan

Scan Python projects for security vulnerabilities and dependency issues.

Community
Advanced
InnerScopeHearingInnerScopeHearing

sast-configuration

Automate SAST tool setup, custom rule creation, and CI/CD integration.

Official
Advanced
alexgutscher26alexgutscher26
4

vulnerability-scanner

Scan codebases for dependencies, secrets, and dangerous patterns.

Community
Advanced