skills.rest
GrupoUS
GrupoUSCOMMUNITY
Explore all skills by this author →
GitHub

vulnerability-scanner

Scan project directories for vulnerabilities and prioritize findings by severity.

1|Updated Dec 13, 2025
Search Tags:#code analysis#security#vulnerability#owasp#scanning#supply chain
One-click install
npx skills add https://github.com/GrupoUS/gpus --skill vulnerability-scanner-grupous
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/GrupoUS/gpus/tree/main/.claude/skills/vulnerability-scanner
Command: npx skills add https://github.com/GrupoUS/gpus --skill vulnerability-scanner-grupous

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps identify and prioritize security vulnerabilities within a codebase or project, aligning with modern security best practices and threat landscapes.

Core Features & Use Cases

  • Automated Security Audits: Scans dependencies, code patterns, and configurations for common security flaws.
  • Risk Prioritization: Helps focus on critical issues based on CVSS, exploitability, and asset value.
  • Supply Chain Security: Analyzes dependencies and build processes for risks.
  • Use Case: Before deploying a new feature, run this Skill to automatically check for hardcoded secrets, dangerous code patterns like SQL injection, and vulnerable dependencies, providing a prioritized list of issues to fix.

Quick Start

Use the vulnerability-scanner skill to perform a full security scan on the current project directory.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for security vulnerabilities and hardcoded secrets?▼

Scanning for security vulnerabilities involves running an automated analysis on your project directory to detect hardcoded secrets, dangerous code patterns, and dependency risks. The scanner identifies common flaws and prioritizes them by severity.

What is OWASP Top 10 risk prioritization and when do I need it?▼

OWASP Top 10 risk prioritization is a method to focus on critical security issues based on exploitability and asset value. You need it before deploying features to ensure dangerous code patterns and vulnerable dependencies are addressed.

Can I use automated security audits to check supply chain risks in dependencies?▼

Yes, automated security audits can check supply chain risks by analyzing dependencies and build processes. The scanner identifies vulnerable dependencies within your project directory to help mitigate potential supply chain attacks.

Does the vulnerability scanner detect SQL injection and dangerous code patterns?▼

Yes, the vulnerability scanner detects dangerous code patterns like SQL injection by analyzing your codebase. It performs automated security scanning to identify flaws and provides a prioritized list of issues to fix.

What are the limitations of automated code analysis for security misconfigurations?▼

Automated code analysis for security misconfigurations identifies common flaws but may miss complex logic vulnerabilities. It prioritizes findings based on severity and potential impact, adhering to OWASP Top 10 principles and modern threat modeling.

Related Skills

Explore More Software Engineering Skills→
glinckerglincker
35

security-scanner

Scan source code for vulnerabilities, hardcoded secrets, and OWASP Top 10 issues.

Official
Intermediate
simplefarmer69simplefarmer69
2

security-guardian

Automates security audits for OpenClaw projects by scanning for hardcoded secrets and container vulnerabilities with Trivy.

Community
Intermediate
bcastelinobcastelino
2

vulnerability-scanner

Scan codebases and infrastructure for security vulnerabilities with Python scripts.

Community
Advanced
MolcajeteAIMolcajeteAI
2

dependency-security

Scan npm dependencies for vulnerabilities using npm audit, Snyk, and Socket.dev.

Official
Intermediate