vulnerability-scanner

Identify and prioritize security vulnerabilities across OWASP categories and supply chain.

8|Updated Apr 8, 2026
One-click install
npx skills add https://github.com/gabriellpequeno/Reserva-Aqui---Projeto-de-fim-de-ciclo --skill vulnerability-scanner-gabriellpequeno
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/gabriellpequeno/Reserva-Aqui---Projeto-de-fim-de-ciclo/tree/main/.cursor/skills/vulnerability-scanner
Command: npx skills add https://github.com/gabriellpequeno/Reserva-Aqui---Projeto-de-fim-de-ciclo --skill vulnerability-scanner-gabriellpequeno

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Identify and prioritize security vulnerabilities across OWASP categories, software supply chain, and surface area before release.

Core Features & Use Cases

  • OWASP risk focus: identify and prioritize security risks in code, dependencies, and configurations.
  • Supply chain auditing: analyze third-party components and their transitive risks.
  • Pre-release hardening: actionable steps to reduce risk prior to deployment.

Quick Start

Run the vulnerability-scanner against your project to generate an actionable risk assessment before release.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan for OWASP vulnerabilities and supply chain risks before a release?

Run a vulnerability scan to identify and prioritize security risks across OWASP categories, software supply chain, and surface area. It analyzes code, dependencies, and configurations to generate an actionable risk report before deployment.

Can I run a security audit on dependencies in a CI pipeline?

Yes, vulnerability scanning integrates into CI pipelines for web and microservice projects. It connects with common package managers to check dependencies and configurations, outputting a prioritized risk report to harden releases.

What is the best way to prioritize security risks in third-party dependencies?

Perform a supply chain audit to analyze third-party components and their transitive risks. The scanner evaluates these alongside code and configurations to produce a prioritized risk report focusing on actionable pre-release hardening.

Does this vulnerability scanner work with common package managers?

Yes, the scanner requires integration with common package managers to analyze software supply chain risks. It supports scanning dependencies and configuration files across web and microservice projects to identify vulnerabilities.