skills.rest
devon87warren-afk
devon87warren-afkCOMMUNITY
Explore all skills by this author →
GitHub

vulnerability-scanner

Scan project codebases for security vulnerabilities across dependencies, secrets, and configurations.

Updated Mar 7, 2026
Search Tags:#code analysis#security#vulnerability#owasp#risk assessment#scanning#supply chain
One-click install
npx skills add https://github.com/devon87warren-afk/eboss-monorepo --skill vulnerability-scanner-devon87warren-afk
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/devon87warren-afk/eboss-monorepo/tree/main/apps/manager/.agent/skills/vulnerability-scanner
Command: npx skills add https://github.com/devon87warren-afk/eboss-monorepo --skill vulnerability-scanner-devon87warren-afk

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps identify and prioritize security vulnerabilities within a project, ensuring that critical risks are addressed proactively and efficiently.

Core Features & Use Cases

  • Comprehensive Scanning: Analyzes dependencies, hardcoded secrets, dangerous code patterns, and configuration issues.
  • Risk Prioritization: Uses CVSS, EPSS, and asset value to rank vulnerabilities.
  • Use Case: Before deploying a new feature, run this Skill to automatically scan the codebase for common vulnerabilities like SQL injection, exposed API keys, or outdated dependencies, providing a clear report of high-risk items.

Quick Start

Use the vulnerability-scanner skill to perform a full security scan on the current project directory.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for security vulnerabilities and hardcoded secrets?▼

Security vulnerability scanning works by analyzing your project dependencies, code patterns, and configurations to identify OWASP Top 10 risks. It then ranks vulnerabilities using CVSS, EPSS, and asset value metrics to prioritize critical security risks proactively.

What is the best way to prioritize security vulnerabilities found in dependencies?▼

Yes, you can scan for OWASP Top 10 vulnerabilities before deploying a new feature. The scanning process automatically checks your codebase for common issues like SQL injection, exposed API keys, and outdated dependencies without requiring external dependencies.

How does automated security scanning identify supply chain weaknesses?▼

Security vulnerability scanning works by analyzing your project dependencies, code patterns, and configurations to identify OWASP Top 10 risks. It then ranks vulnerabilities using CVSS, EPSS, and asset value metrics to prioritize critical security risks proactively.

Can I scan for OWASP Top 10 vulnerabilities without external dependencies?▼

The best way to prioritize security vulnerabilities is using CVSS, EPSS, and asset value metrics. This approach ranks identified dependency risks, ensuring that critical security vulnerabilities are addressed efficiently before deployment.

Related Skills

Explore More Software Engineering Skills→
fritzprixfritzprix
8

system-setup

Install and verify MCP runtime dependencies across Windows, Linux, and macOS.

Community
Intermediate
simoabidsimoabid
1

vulnerability_scanner

Scan projects for OWASP 2025 vulnerabilities, secrets, and risky configurations.

Community
Advanced
westnwestn
1

cso

Monitor security posture across infrastructure, code, and third-party risk.

Community
Advanced
jeremylongshorejeremylongshore
2.6k

scanning-container-security

Scan container images and running containers for vulnerabilities using Trivy or Snyk.

Community
Intermediate