vulnerability-scanner

Analyze software security risks using OWASP 2025 and attack surface mapping.

Updated Feb 26, 2026
One-click install
npx skills add https://github.com/dgkngk/super-kit --skill vulnerability-scanner-dgkngk
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/dgkngk/super-kit/tree/main/skills/tech/vulnerability-scanner
Command: npx skills add https://github.com/dgkngk/super-kit --skill vulnerability-scanner-dgkngk

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps identify and prioritize security vulnerabilities in software by applying advanced analysis principles, mapping attack surfaces, and understanding the latest threat landscapes.

Core Features & Use Cases

  • OWASP Top 10 Analysis: Covers the latest OWASP Top 10 risks, including supply chain security and exceptional conditions.
  • Attack Surface Mapping: Guides the process of identifying potential entry points and data flows.
  • Risk Prioritization: Provides a framework for prioritizing vulnerabilities based on CVSS, EPSS, and business impact.
  • Use Case: A developer can use this skill to get a comprehensive understanding of potential security flaws in their application before deployment, focusing on the most critical risks first.

Quick Start

Run a security scan on the current project directory.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan for security vulnerabilities in my software project before deployment?

To scan for security vulnerabilities, you can run automated validation scripts against your project directory to identify potential risks, map your attack surface, and prioritize fixes based on business impact before deployment.

What is the best way to prioritize software risks using CVSS and EPSS?

The best way to prioritize software risks is by applying a framework that evaluates vulnerabilities using CVSS, EPSS, and business impact. This methodology ensures you focus remediation efforts on the most critical threats first.

Does this vulnerability scanner cover the OWASP Top 10 and supply chain security?

Yes, this vulnerability scanner covers the OWASP Top 10 2025 risks, explicitly including supply chain security and exceptional conditions to help you understand the latest threat landscapes and secure your software development lifecycle.

How do I map an application attack surface to identify potential entry points?

To map an application attack surface, this skill guides you through the process of identifying potential entry points and tracing data flows within your software, providing detailed reference checklists for comprehensive security audits.

Can I use these security scanning scripts for comprehensive compliance audits?

Yes, you can use the provided security scanning scripts for comprehensive audits. They enable automated validation of vulnerability analysis principles, working alongside detailed reference checklists to ensure thorough security assessments.

When should I perform threat modeling and risk assessments during software development?

You should perform threat modeling and risk assessments before deployment to get a comprehensive understanding of potential security flaws. This allows you to apply advanced analysis principles and prioritize the most critical vulnerabilities early.