skills.rest
lchenrique
lchenriqueCOMMUNITY
Explore all skills by this author →
GitHub

vulnerability-scanner

Identifies and prioritizes vulnerabilities in codebases by analyzing dependencies, secrets, code patterns, and configurations.

Updated Jan 20, 2026
Search Tags:#security#vulnerability#dependencies#configuration#secrets#scan#code-patterns
One-click install
npx skills add https://github.com/lchenrique/politron-ide --skill vulnerability-scanner-lchenrique
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/lchenrique/politron-ide/tree/main/.agent/skills/vulnerability-scanner
Command: npx skills add https://github.com/lchenrique/politron-ide --skill vulnerability-scanner-lchenrique

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill helps security teams proactively identify and prioritize software vulnerabilities by analyzing dependencies, secrets, code patterns, and configuration issues across a project.

Core Features & Use Cases

  • Automated Dependency Audit: Checks dependencies and supply-chain risks across common package managers.
  • Secrets and Credential Detection: Scans sources for API keys, tokens, passwords, and cloud credentials.
  • Dangerous Pattern Detection: Flags risky code patterns and insecure configurations that could lead to exploits.
  • Use Case: Run the scanner on a codebase to generate a prioritized list of remediation tasks for the security team.

Quick Start

Run the vulnerability-scanner against a project directory to generate a findings report.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan a codebase for exposed secrets and vulnerable dependencies?▼

To scan a codebase for exposed secrets and vulnerable dependencies, run an automated audit across source files and package managers. This detects API keys, tokens, and supply-chain risks, returning structured findings suitable for remediation.

What is the best way to detect insecure code patterns and configuration issues?▼

The best way to detect insecure code patterns and configuration issues is to analyze source files and project settings for risky logic and misconfigurations. This flags dangerous patterns that could lead to exploits.

Can I prioritize vulnerabilities by analyzing secrets, dependencies, and code patterns together?▼

Yes, you can prioritize vulnerabilities by analyzing secrets, dependencies, and code patterns together. Applying checks across these areas generates a prioritized list of remediation tasks for security teams.

How does credential detection work when scanning source files for security risks?▼

Credential detection works by scanning source files for known formats of API keys, passwords, and cloud credentials. It identifies exposed credentials within the codebase to prevent unauthorized access.

Do I need a specific environment to run a vulnerability scan for supply-chain risks?▼

You need access to the project directory and its common package managers to run a vulnerability scan for supply-chain risks. The scanner analyzes dependencies and configuration files directly within the codebase.

Related Skills

Explore More Software Engineering Skills→
Obsidian-OwlObsidian-Owl
9

sw-init

Initialize Specwright by detecting the development stack and generating configuration files.

Official
Intermediate
trailofbitstrailofbits
6.5k

insecure-defaults

Detect insecure default configurations with hardcoded secrets and weak authentication.

Official
Intermediate
scanbottscanbott

cso

Automate infrastructure-first security audits with secrets archaeology and dependency checks.

Community
Advanced
sovriumsovrium
3

security-scanner

Identify security vulnerabilities in codebases via static analysis.

Official
Advanced