vulnerability-scanner

Scan projects for OWASP Top 10 vulnerabilities and prioritize risks using CVSS and EPSS.

Updated Feb 28, 2026
One-click install
npx skills add https://github.com/lucasfdigital/Orchard --skill vulnerability-scanner-lucasfdigital
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/lucasfdigital/Orchard/tree/main/skills/vulnerability-scanner
Command: npx skills add https://github.com/lucasfdigital/Orchard --skill vulnerability-scanner-lucasfdigital

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps identify and prioritize security vulnerabilities within a project, moving beyond simple scans to a proactive, attacker-mindset approach.

Core Features & Use Cases

  • OWASP Top 10 Analysis: Understand and audit against the latest OWASP Top 10 risks, including supply chain security.
  • Attack Surface Mapping: Systematically identify entry points, data flows, and critical assets.
  • Risk Prioritization: Combine CVSS, EPSS, and business context to focus on the most critical threats.
  • Use Case: Before deploying a new microservice, run this Skill to identify potential access control flaws, insecure configurations, and vulnerable dependencies, ensuring a robust security posture.

Quick Start

Use the vulnerability-scanner skill to perform a full security scan on the current project directory.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform an OWASP Top 10 vulnerability scan on my project?

To perform an OWASP Top 10 vulnerability scan, this skill audits your project directory against the latest security risks, including supply chain threats, access control flaws, and insecure configurations. It identifies entry points and systematically maps your attack surface.

What is risk prioritization using CVSS and EPSS in threat modeling?

Risk prioritization using CVSS and EPSS combines vulnerability severity scores with exploitability data and business asset value. This context-driven approach helps focus remediation efforts on the most critical threats identified during security scanning.

Can I use this vulnerability scanner to audit access control and authentication risks?

Yes, you can use this vulnerability scanner to audit access control and authentication risks. It performs comprehensive analysis covering broken access control, cryptographic failures, injection flaws, and logging deficiencies based on attacker-mindset threat modeling.

How does attack surface mapping work for identifying vulnerable dependencies?

Attack surface mapping works by systematically identifying entry points, data flows, and critical assets to uncover vulnerable dependencies. This proactive approach helps detect supply chain risks and configuration issues before deploying new microservices.

What is the best way to assess security posture before deploying a new microservice?

The best way to assess security posture before deployment is running a comprehensive vulnerability analysis. This identifies potential access control flaws, insecure configurations, and vulnerable dependencies to ensure a robust security baseline.