vulnerability-scanner

Analyze code repositories for OWASP Top 10 and supply chain vulnerabilities.

1|Updated Jun 17, 2026
One-click install
npx skills add https://github.com/NabilThange/ohm-band --skill vulnerability-scanner-nabilthange
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/NabilThange/ohm-band/tree/main/.agent/skills/vulnerability-scanner
Command: npx skills add https://github.com/NabilThange/ohm-band --skill vulnerability-scanner-nabilthange

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill identifies and prioritizes security vulnerabilities in applications and systems, mitigating risks with detailed analysis and recommendations.

Core Features & Use Cases

  • Security Expert Mindset: Instills the essential security principles to assume breach, apply defense in depth, and ensure least privilege access.
  • OWASP Top 10: Analyzes and categorizes potential risks based on the OWASP Top 10 2025 framework.
  • Supply Chain Security: Inspects the integrity of software supply chains, addressing new risks in dependency management and build processes.
  • Attack Surface Mapping: Identifies potential entry points, data flows, and trust boundaries.
  • Risk Prioritization: Scores and prioritizes vulnerabilities using the Common Vulnerability Scoring System (CVSS).
  • Exceptional Conditions Handling: Ensures proper security configurations in failure states and exceptional scenarios.

Quick Start

Scan the 'application-source-code' directory for security vulnerabilities with the vulnerability-scanner skill.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my application source code for OWASP Top 10 vulnerabilities?

To scan application source code for OWASP Top 10 vulnerabilities, you can use this tool to analyze repositories, categorize potential risks, and score them using CVSS. It requires Python scripts to execute checks and detect risks early in the development cycle.

Can I integrate vulnerability assessment into my CI/CD pipelines?

Yes, you can integrate vulnerability assessment into CI/CD pipelines to detect potential risks early. The tool executes Python scripts to perform in-depth analysis based on supply chain security principles and custom configurations during your build processes.

What is the best way to prioritize security vulnerabilities detected in my code?

The best way to prioritize security vulnerabilities is by scoring them using the Common Vulnerability Scoring System (CVSS). This tool maps your attack surface, identifies entry points, and ranks vulnerabilities to help you mitigate the most critical risks first.

Does this vulnerability scanner inspect software supply chain security risks?

Yes, this vulnerability scanner inspects software supply chain security by examining dependency management and build processes. It addresses new risks in your software supply chain to ensure integrity throughout the development lifecycle.

What do I need to perform in-depth security analysis on my code repositories?

To perform in-depth security analysis on code repositories, you need Python scripts for execution and custom configurations. The tool applies a security expert mindset, assuming breach and applying defense in depth to identify entry points and trust boundaries.

How does the tool handle security configurations during exceptional conditions?

The tool handles security configurations during exceptional conditions by ensuring proper defense in failure states. It applies least privilege access and defense in depth principles to maintain security even when the system encounters unexpected scenarios.