skills.rest
Geargrindadmin
GeargrindadminCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

vulnerability-scanner

Scan project directories for hardcoded secrets, dangerous patterns, and dependency vulnerabilities.

Updated Mar 7, 2026
Search Tags:#code analysis#security#vulnerability#owasp#supply chain#scanner
One-click install
npx skills add https://github.com/Geargrindadmin/gg-agentic-harness --skill vulnerability-scanner-geargrindadmin
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/Geargrindadmin/gg-agentic-harness/tree/main/.agent/skills/vulnerability-scanner
Command: npx skills add https://github.com/Geargrindadmin/gg-agentic-harness --skill vulnerability-scanner-geargrindadmin

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps identify and prioritize security vulnerabilities within a codebase, reducing the risk of breaches and ensuring compliance with modern security standards.

Core Features & Use Cases

  • Automated Security Audits: Scans code for common vulnerabilities like injection flaws, misconfigurations, and secrets.
  • Supply Chain Security: Analyzes dependencies for known vulnerabilities (OWASP A03).
  • Risk Prioritization: Helps focus remediation efforts on the most critical issues based on CVSS, EPSS, and asset value.
  • Use Case: Before deploying a new feature, run this scanner to catch hardcoded API keys, insecure dependency versions, and potential SQL injection flaws, preventing costly security incidents.

Quick Start

Use the vulnerability-scanner skill to perform a full security scan on the current project directory.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for hardcoded secrets and dependency vulnerabilities?▼

To scan for hardcoded secrets and dependency vulnerabilities, perform a comprehensive security vulnerability scan on your project directory to identify dangerous code patterns and supply chain risks automatically.

What is the best way to prioritize security vulnerabilities for remediation?▼

The best way to prioritize security vulnerabilities is to analyze risk based on CVSS and EPSS scores alongside asset value, helping you focus remediation efforts on the most critical issues first.

How does a security vulnerability scanner detect OWASP Top 10 issues?▼

A security vulnerability scanner detects OWASP Top 10 issues by analyzing code patterns and project configurations to identify injection flaws, security misconfigurations, and known vulnerable dependencies.

Can I use automated security audits to check for misconfigurations before deployment?▼

Yes, you can run automated security audits before deploying new features to check for misconfigurations, hardcoded API keys, and insecure dependency versions to prevent costly security incidents.

Does code analysis for security flaws require any external dependencies?▼

Code analysis for security flaws does not require external dependencies, allowing you to directly scan your project directory for dangerous patterns and hardcoded secrets without additional environment setup.

Related Skills

Explore More Software Engineering Skills→
jschultejschulte
3

analyze

Analyze codebases to identify tech stack, architecture, and directory structure.

Community
Basic
williamzujkowskiwilliamzujkowski
17

nosql

Mitigate security vulnerabilities from insecure NoSQL patterns in database environments.

Community
Intermediate
thisisqubikathisisqubika

security-review

Analyze code repositories for vulnerabilities using SAST and AI triage.

Official
Advanced
benjaminshoemakerbenjaminshoemaker
39

security-scan

Scan codebases for dependency vulnerabilities, risky patterns, and secrets.

Community
Intermediate