skills.rest
htafolla
htafollaCOMMUNITY
Explore all skills by this author →
GitHub

vulnerability-scanner

Analyze software projects for OWASP 2025, supply chain, and attack surface vulnerabilities.

5|1|Updated Jan 7, 2026
Search Tags:#security#vulnerability#owasp#threat modeling#risk assessment#supply chain
One-click install
npx skills add https://github.com/htafolla/StringRay --skill vulnerability-scanner-htafolla
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/htafolla/StringRay/tree/main/ci-test-env/.opencode/integrations/vulnerability-scanner
Command: npx skills add https://github.com/htafolla/StringRay --skill vulnerability-scanner-htafolla

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps identify and prioritize security vulnerabilities within a project by applying advanced analysis principles, focusing on the latest threat landscapes and best practices.

Core Features & Use Cases

  • OWASP Top 10 Analysis: Covers critical risk categories with 2025 updates.
  • Supply Chain Security: Assesses risks from dependencies and build pipelines.
  • Attack Surface Mapping: Identifies entry points, data flows, and trust boundaries.
  • Risk Prioritization: Uses CVSS, EPSS, and business context for actionable insights.
  • Use Case: Before deploying a new feature, run this Skill to scan for common vulnerabilities like broken access control, injection flaws, and supply chain risks, ensuring a more secure release.

Quick Start

Execute the security_scan.py script with the path to your project to begin the analysis.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my software project for OWASP vulnerabilities and supply chain risks?▼

To scan for OWASP vulnerabilities and supply chain risks, execute the security_scan.py script with your project path. This automates validation against OWASP 2025 standards and dependency threats to identify security flaws.

What is attack surface mapping and when do I need it for risk assessment?▼

Attack surface mapping identifies entry points, data flows, and trust boundaries in your software. You need it during risk assessment to locate where vulnerabilities can be exploited before deploying new features.

How do I prioritize security vulnerabilities using CVSS and EPSS scores?▼

You prioritize security vulnerabilities by evaluating CVSS and EPSS scores within your specific business context. This approach filters theoretical risks to provide actionable insights for the most likely and impactful threats.

Does this vulnerability analysis tool work with Python scripts and no external dependencies?▼

Yes, the vulnerability analysis functions using included Python scripts for automated validation and reference files for checklists. It requires no external dependencies to perform advanced security and supply chain risk assessments.

What's the best way to check for broken access control and injection flaws before release?▼

The best way to check for broken access control and injection flaws is running a comprehensive vulnerability analysis before release. This validates your code against OWASP 2025 updates and maps your full attack surface.

Related Skills

Explore More Software Engineering Skills→
pingmepipingmepi

pm-new

Scaffolds a PM-OS project directory from a business statement with Python 3.

Community
Basic
wgpsecwgpsec
1.6k

report-generate

Generate structured penetration testing reports with CVSS risk ratings and remediation guidance.

Official
Intermediate
jaskaranhundaljaskaranhundal
3

supply-chain-risk

Assesses software supply chain risks via dependency, build pipeline, and SBOM analysis.

Community
Advanced
icartshicartsh
4

code-analyze

Analyze .NET solutions for code quality, security, and dependency issues.

Community
Advanced