vulnerability-scanner

To scan for security vulnerabilities, this Skill analyzes your project's dependencies, code patterns, secrets, and configurations. It then provides a prioritized list of vulnerabilities and actionable remediation steps based on OWASP 2025 principles.

Yes, you can assess supply chain security risks. The Skill evaluates the integrity of third-party dependencies and build pipelines to identify potential vulnerabilities within your software supply chain.

Risk prioritization utilizes CVSS, EPSS, and asset value metrics to evaluate identified vulnerabilities. This approach ensures you can focus your remediation efforts on the most critical security risks first.

Attack surface mapping identifies potential entry points for threats within your software project. This Skill integrates mapping with automated security validation scripts and reference checklists to deliver comprehensive vulnerability audits.

No external dependencies are required to run this vulnerability scanner. It operates autonomously using built-in scripts for security validation and references for comprehensive audits.

The best way to perform an automated security audit on a microservice is to run a full scan on the project directory. The Skill executes security validation scripts to analyze code patterns, secrets, and configurations.