vulnerability-scanner

Detect security vulnerabilities, secrets, and dependency risks in code repositories.

Updated May 3, 2026

Search Tags:#code analysis #security #secrets #vulnerabilities #risk #dependency

Ready to run

npx skills add https://github.com/Durannd/skills --skill vulnerability-scanner-durannd

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/Durannd/skills/tree/main/skills/vulnerability-scanner
Command: npx skills add https://github.com/Durannd/skills --skill vulnerability-scanner-durannd

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires subprocess, json, re, argparse, pathlib, typing, and includes scripts (resource) components.

What problem does it solve?

Vulnerability Scanner helps security teams and developers detect security weaknesses and risky patterns in codebases, reducing potential attack points and enhancing compliance.

Core Features & Use Cases

Automated Code Security Checks: Analyzes code repositories for insecure patterns, secrets, and dependency vulnerabilities.
Supply Chain Security Validation: Checks for lock files and known vulnerabilities in dependencies.
Use Case: Quickly assess a web application's code for secret leaks and outdated dependencies before deployment to prevent exploits.

Quick Start

Use the vulnerability-scanner script to scan your project directory for security issues and output the results in JSON format.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan my codebase for security vulnerabilities and leaked secrets?▼

To scan for security vulnerabilities and secrets, run the scanner script against your project directory. It analyzes code repositories for insecure patterns, exposed secrets, and dependency risks, outputting results in JSON format for review.

Can I check my project for dependency vulnerabilities and lock file risks?▼

Yes, you can check dependency vulnerabilities by running the scanner. It validates supply chain security by inspecting lock files and identifying known vulnerabilities in your project dependencies.

How do I automate code security checks in a CI/CD pipeline?▼

You can automate code security checks in a CI/CD pipeline by integrating the scanner script. It enables continuous security validation by analyzing code and configuration for compliance with best practices.

What is the best way to detect insecure code patterns before deployment?▼

The best way to detect insecure code patterns before deployment is using an automated vulnerability scanner. It analyzes your software projects to identify and prioritize security risks, reducing potential attack points.

Does the vulnerability scanner output results in a structured format?▼

Yes, the vulnerability scanner outputs results in JSON format. This structured output allows software engineering teams to programmatically parse identified risks, insecure patterns, and secrets for further processing.

Are there limitations to detecting security risks with automated code analysis?▼

Automated code analysis detects known insecure patterns, secrets, and dependency risks based on predefined checks. It focuses on proactive security management but should be combined with manual reviews for complex logic flaws.