skills.rest
Harmitx7
Harmitx7COMMUNITY
Explore all skills by this author →
WebsiteGitHub

vulnerability-scanner

Scan codebases for security vulnerabilities using OWASP Top 10 principles.

3|1|Updated Feb 20, 2026
Search Tags:#security#vulnerability#owasp#injection#secrets#dependency audit#code scan
One-click install
npx skills add https://github.com/Harmitx7/tribunal-kit --skill vulnerability-scanner-harmitx7
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/Harmitx7/tribunal-kit/tree/main/.agent/skills/vulnerability-scanner
Command: npx skills add https://github.com/Harmitx7/tribunal-kit --skill vulnerability-scanner-harmitx7

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps identify and mitigate security vulnerabilities in your codebase, protecting against common attack vectors and ensuring supply chain integrity.

Core Features & Use Cases

  • Code Pattern Analysis: Detects dangerous code patterns like SQL injection, XSS, and insecure deserialization.
  • Secret Detection: Flags hardcoded API keys, passwords, and other sensitive credentials.
  • Dependency Auditing: Checks for known vulnerabilities in project dependencies.
  • Configuration Review: Identifies security misconfigurations in project settings.
  • Use Case: Before deploying a new feature, run this Skill to automatically scan for common security flaws, ensuring your application is robust against attacks.

Quick Start

Run a full security scan on the current project directory.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for security vulnerabilities and hardcoded secrets?▼

To scan codebases for security vulnerabilities and hardcoded secrets, this Skill analyzes code patterns, configuration files, and project dependencies using Python scripts to detect injection flaws and sensitive credentials.

What is the best way to detect OWASP Top 10 injection flaws in my code?▼

Detecting OWASP Top 10 injection flaws is handled by analyzing dangerous code patterns like SQL injection, XSS, and insecure deserialization, validating your project against secure software development principles.

Can I check for known vulnerabilities in project dependencies automatically?▼

Yes, you can check for known vulnerabilities in project dependencies automatically. The Skill performs dependency auditing to verify supply chain integrity and identify outdated or compromised packages.

Do I need any special setup to run a full security scan on my project directory?▼

No special setup is required beyond your project files. The Skill uses internal Python scripts and references to directly analyze your current project directory for security misconfigurations and code flaws.

What types of security misconfigurations can be identified in project settings?▼

Security misconfigurations identified in project settings include insecure configuration files and dangerous code patterns. The configuration review flags settings that expose your application to common attack vectors.

Related Skills

Explore More Software Engineering Skills→
salmanabdurrahmansalmanabdurrahman

supply-chain-dependencies

Analyze dependency manifests and lockfiles for known vulnerabilities and maintenance risks.

Community
Advanced
sugarforeversugarforever
131

Next.js Security Scan

Scan Next.js and TypeScript/JavaScript projects for security vulnerabilities.

Community
Advanced
RedWoodOGRedWoodOG
174

security-audit

Scan codebases for secrets, vulnerable dependencies, and misconfigurations.

Community
Advanced
nikhillinitnikhillinit

security-scanner

Detect security vulnerabilities, secrets, and misconfigurations in codebases.

Community
Advanced