skills.rest
ivanshtokov
ivanshtokovCOMMUNITY
Explore all skills by this author →
GitHub

vulnerability-scanner

Analyze codebases for dependency, secret, pattern, and configuration vulnerabilities.

2|Updated Jan 19, 2026
Search Tags:#security#vulnerability#owasp#supply-chain#code-analysis#scanning
One-click install
npx skills add https://github.com/ivanshtokov/copilot-kit --skill vulnerability-scanner-ivanshtokov
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/ivanshtokov/copilot-kit/tree/main/.github/skills/vulnerability-scanner
Command: npx skills add https://github.com/ivanshtokov/copilot-kit --skill vulnerability-scanner-ivanshtokov

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

The vulnerability-scanner helps teams identify and prioritize security gaps in codebases by auditing dependencies, secrets exposure, risky code patterns, and insecure configurations.

Core Features & Use Cases

  • Supply-chain risk assessment for dependencies and build pipelines.
  • Secret scanning for API keys, tokens, and credentials across project files.
  • Pattern and configuration checks to detect insecure practices and misconfigurations.
  • Use case: a typical repo can be analyzed to produce a remediation plan with risk levels and actionable steps.

Quick Start

Run the vulnerability-scanner on your project to generate a security report.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for security vulnerabilities and exposed secrets?▼

To scan for security vulnerabilities, run the built-in Python script to analyze dependencies, secrets, and configurations. It generates a security report with risk scoring and actionable remediation steps.

What is supply-chain risk assessment for code dependencies?▼

Supply-chain risk assessment identifies security vulnerabilities in project dependencies and build pipelines. It evaluates libraries for known issues to help prioritize remediation based on detected risk levels.

Can I detect insecure configurations and dangerous code patterns across different ecosystems?▼

Yes, vulnerability scanning covers insecure configurations and dangerous code patterns across common ecosystems. It audits project files to detect misconfigurations and insecure practices for security engineers and developers.

Does the vulnerability scanner require external dependencies to run?▼

No, the vulnerability scanner operates with no external dependencies. It uses a built-in Python script and reference files to guide risk scoring, ensuring code analysis runs without additional package installations.

What is the best way to prioritize security gaps in my repository?▼

The best way to prioritize security gaps is using an automated scanner that evaluates supply-chain risks, secret exposure, and misconfigurations. It produces a remediation plan with risk levels to address critical vulnerabilities first.

Related Skills

Explore More Software Engineering Skills→
riftzen-bitriftzen-bit

configure-ecc

Install and configure Everything Gemini Code components with verification and optional optimization.

Community
Advanced
micaelmaltamicaelmalta
1

security-reviewer

Identify and remediate security vulnerabilities across code, configuration, and architecture.

Community
Advanced
voidrotvoidrot

sast-configuration

Configure SAST tools like Semgrep, CodeQL, and SonarQube for CI/CD pipelines.

Community
Intermediate
camgrimseccamgrimsec
3

dast-scanner

Run dynamic security scans on live web applications using Nuclei and OWASP ZAP.

Community
Advanced