skills.rest
kriangkraiii
kriangkraiiiCOMMUNITY
Explore all skills by this author →
GitHub

vulnerability-scanner

Analyze dependencies, source code, and configurations to identify vulnerabilities and risky patterns.

2|1|Updated Feb 7, 2026
Search Tags:#static analysis#code review#security#vulnerability#scan#dependency
One-click install
npx skills add https://github.com/kriangkraiii/Game_E-commerce --skill vulnerability-scanner-kriangkraiii
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/kriangkraiii/Game_E-commerce/tree/main/shopping-cart-spring-boot-main/.agent/skills/vulnerability-scanner
Command: npx skills add https://github.com/kriangkraiii/Game_E-commerce --skill vulnerability-scanner-kriangkraiii

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

It helps developers and security professionals detect vulnerabilities and security risks in codebases and configurations, reducing exposure to attacks.

Core Features & Use Cases

  • Security Assessment: Performs dependency analysis, secret detection, code pattern scans, and configuration reviews.
  • Threat Identification: Finds potential injection points, insecure deserialization, unsafe code patterns, and insecure settings.
  • Use Case: A team performs a routine code audit before deploying an application, automatically identifying secrets and risky code patterns to address.

Quick Start

Run the script in your project directory to scan for dependencies, secrets, code patterns, and configuration issues, then review the generated report.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan source code for security vulnerabilities before deployment?▼

To scan source code for security vulnerabilities, run the automated assessment script in your project directory. It analyzes dependencies, detects secrets, and flags risky code patterns to help ensure secure coding practices.

What security risks are found during static analysis of software projects?▼

Static analysis of software projects identifies potential injection points, insecure deserialization, unsafe code patterns, insecure settings, and exposed secrets to reduce exposure to attacks.

Can I detect hardcoded secrets and insecure configurations in my codebase?▼

Yes, you can detect hardcoded secrets and insecure configurations by running an automated security assessment that performs secret detection and configuration reviews across your project files.

How do I perform a dependency analysis to find risky packages?▼

To perform dependency analysis and find risky packages, execute the security scanner in your project directory to evaluate dependencies and generate a report highlighting vulnerable components.

Does automated code review replace manual security audits for pre-deployment checks?▼

Automated code review supports manual security audits by rapidly identifying injection points and unsafe patterns, but teams should still review the generated report to ensure comprehensive pre-deployment compliance.

Related Skills

Explore More Software Engineering Skills→
cyperx84cyperx84
2

Vulnerability Detection

Scan source code, dependencies, and infrastructure for security vulnerabilities.

Community
Advanced
lchenriquelchenrique

vulnerability-scanner

Identifies and prioritizes vulnerabilities in codebases by analyzing dependencies, secrets, code patterns, and configurations.

Community
Advanced
weirdgmeweirdgme
4

devsecops

Automate security integration across CI/CD pipelines with policy-as-code enforcement.

Community
Advanced
Endor-Solutions-ArchitectureEndor-Solutions-Architecture
2

endor-sast

Run static application security testing to detect code-level vulnerabilities in a repository.

Official
Advanced