vulnerability-scanner

Automate vulnerability analysis and prioritization for software projects.

1|Updated Dec 19, 2025
One-click install
npx skills add https://github.com/fnsalinas/fnsalinas.github.io --skill vulnerability-scanner-fnsalinas
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/fnsalinas/fnsalinas.github.io/tree/main/.agent/skills/vulnerability-scanner
Command: npx skills add https://github.com/fnsalinas/fnsalinas.github.io --skill vulnerability-scanner-fnsalinas

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Vulnerability-scanner helps teams identify and prioritize security weaknesses in software projects by analyzing dependencies, code patterns, and configurations in line with OWASP 2025 and supply chain risks.

Core Features & Use Cases

  • Automated dependency and code pattern scanning to surface vulnerabilities
  • Severity-based prioritization with clear remediation guidance
  • CI/CD integration and audit-ready reports for security reviews

Quick Start

Run a security scan on a project path to generate a vulnerability report.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my project for security vulnerabilities and dependencies?

To scan for security vulnerabilities, you run a Python-based scanner on your project path. It analyzes code patterns, dependencies, and configurations to identify security risks and generate a vulnerability report.

What is OWASP 2025 risk prioritization in software vulnerability scanning?

OWASP 2025 risk prioritization in vulnerability scanning evaluates codebases and deployment configurations to rank security weaknesses by severity. It surfaces supply chain weaknesses and provides clear remediation guidance for identified risks.

Can I integrate a vulnerability scanner into CI/CD pipelines for automated security checks?

Yes, you can integrate this vulnerability scanner into CI/CD pipelines for automated security checks. It generates audit-ready reports and performs functional checks for dependencies, secrets, and risky code patterns during the build process.

What's the best way to identify supply chain weaknesses and risky code patterns?

The best way to identify supply chain weaknesses is using an automated vulnerability analysis tool. It applies risk prioritization to scan codebases and deployment configurations, satisfying functional checks for risky code patterns and security configurations.

Do I need Python to run an automated vulnerability analysis on my codebase?

Yes, you need Python to run this automated vulnerability analysis. The scanner is a Python-based script that executes security checks on your codebase, dependencies, and deployment configurations to produce an audit-ready report.

What limitations exist when scanning deployment configurations for security risks?

A limitation when scanning deployment configurations is that the scanner focuses strictly on identifying OWASP 2025 risks, secrets, and supply chain weaknesses. It generates audit-ready reports but requires manual implementation of the provided remediation guidance.