vulnerability-scanner

Scan project directories for hardcoded secrets, dangerous patterns, and dependency vulnerabilities.

Updated Mar 7, 2026

Search Tags:#code analysis #security #vulnerability #owasp #supply chain #scanner

Ready to run

npx skills add https://github.com/Geargrindadmin/gg-agentic-harness --skill vulnerability-scanner-geargrindadmin

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/Geargrindadmin/gg-agentic-harness/tree/main/.agent/skills/vulnerability-scanner
Command: npx skills add https://github.com/Geargrindadmin/gg-agentic-harness --skill vulnerability-scanner-geargrindadmin

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps identify and prioritize security vulnerabilities within a codebase, reducing the risk of breaches and ensuring compliance with modern security standards.

Core Features & Use Cases

Automated Security Audits: Scans code for common vulnerabilities like injection flaws, misconfigurations, and secrets.
Supply Chain Security: Analyzes dependencies for known vulnerabilities (OWASP A03).
Risk Prioritization: Helps focus remediation efforts on the most critical issues based on CVSS, EPSS, and asset value.
Use Case: Before deploying a new feature, run this scanner to catch hardcoded API keys, insecure dependency versions, and potential SQL injection flaws, preventing costly security incidents.

Quick Start

Use the vulnerability-scanner skill to perform a full security scan on the current project directory.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan my codebase for hardcoded secrets and dependency vulnerabilities?▼

To scan for hardcoded secrets and dependency vulnerabilities, perform a comprehensive security vulnerability scan on your project directory to identify dangerous code patterns and supply chain risks automatically.

What is the best way to prioritize security vulnerabilities for remediation?▼

The best way to prioritize security vulnerabilities is to analyze risk based on CVSS and EPSS scores alongside asset value, helping you focus remediation efforts on the most critical issues first.

How does a security vulnerability scanner detect OWASP Top 10 issues?▼

A security vulnerability scanner detects OWASP Top 10 issues by analyzing code patterns and project configurations to identify injection flaws, security misconfigurations, and known vulnerable dependencies.

Can I use automated security audits to check for misconfigurations before deployment?▼

Yes, you can run automated security audits before deploying new features to check for misconfigurations, hardcoded API keys, and insecure dependency versions to prevent costly security incidents.

Does code analysis for security flaws require any external dependencies?▼

Code analysis for security flaws does not require external dependencies, allowing you to directly scan your project directory for dangerous patterns and hardcoded secrets without additional environment setup.