vulnerability-scanner

Name: vulnerability-scanner
Availability: InStock
Author: logisoft-web

Scan code repositories for vulnerabilities in dependencies, secrets, and configurations.

Updated Apr 17, 2026

Search Tags:#code analysis #security #vulnerability #configuration #secrets #dependency

Ready to run

npx skills add https://github.com/Logisoft-web/kiro-skills --skill vulnerability-scanner-logisoft-web

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/Logisoft-web/kiro-skills/tree/main/vulnerability-scanner
Command: npx skills add https://github.com/Logisoft-web/kiro-skills --skill vulnerability-scanner-logisoft-web

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires subprocess, json, re, argparse, datetime, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps security professionals and developers automatically identify vulnerabilities in codebases, configurations, dependencies, and secrets, reducing the risk of cyber threats.

Core Features & Use Cases

Dependency Security Checks: Audit project dependencies for known vulnerabilities and supply chain risks.
Secrets Detection: Scan code for hardcoded API keys, passwords, and private credentials to prevent data leaks.
Code Pattern Analysis: Detect dangerous coding patterns such as injection and unsafe deserialization.
Configuration Validation: Review security settings like headers and environment configs to ensure deployment safety.
Use Case: Conduct a comprehensive security audit of a web application before deployment, covering code, dependencies, and environment settings.

Quick Start

Run the script with your project directory to perform a full security scan and receive immediate insights into potential vulnerabilities.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan code for hardcoded secrets and security vulnerabilities?▼

To scan code for hardcoded secrets and security vulnerabilities, run this script against your project directory to perform automated security analysis. It parses code patterns and configurations to detect exposed credentials, dangerous coding patterns, and deployment risks.

What is automated dependency security analysis for application safety?▼

Automated dependency security analysis audits project dependencies for known vulnerabilities and supply chain risks. It identifies outdated or compromised packages within your codebase to ensure application safety and prevent cyber threats before deployment.

Can I use this vulnerability scanner for CI/CD pipelines?▼

Yes, you can use this vulnerability scanner for CI/CD pipelines and vulnerability management workflows. It requires Python and generates automated JSON reports of parsed findings, making it suitable for continuous integration security gates.

Does this security audit tool check configuration settings and environment variables?▼

Yes, this security audit tool checks configuration settings and environment variables. It performs configuration validation to review security headers and environment configs, ensuring your application deployment settings are safe from misconfigurations.

What coding patterns and security risks does the code analysis detect?▼

The code analysis detects dangerous coding patterns such as injection flaws and unsafe deserialization. It identifies these security risks by parsing your codebase to prevent application vulnerabilities and ensure robust software engineering practices.

Do I need Python to run automated security analysis on my code repository?▼

Yes, you need Python to run automated security analysis on your code repository. The script requires Python along with subprocess, regex, and JSON modules to parse files and automatically report security findings.