skills.rest
nguyenphp
nguyenphpCOMMUNITY
Explore all skills by this author →
GitHub

vulnerability-scanner

Detect and prioritize security vulnerabilities in software projects using Python scripts.

41|12|Updated Jan 16, 2026
Search Tags:#code analysis#security#vulnerability#owasp#dependencies#secrets#scanning
One-click install
npx skills add https://github.com/nguyenphp/antigravity-marketing --skill vulnerability-scanner-nguyenphp
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/nguyenphp/antigravity-marketing/tree/main/templates/.agent/skills/vulnerability-scanner
Command: npx skills add https://github.com/nguyenphp/antigravity-marketing --skill vulnerability-scanner-nguyenphp

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps identify and prioritize security vulnerabilities within a codebase, reducing the risk of breaches and ensuring compliance with security best practices.

Core Features & Use Cases

  • Dependency Analysis: Scans project dependencies for known vulnerabilities (OWASP A03).
  • Secret Detection: Finds hardcoded secrets like API keys and passwords (OWASP A04).
  • Code Pattern Scanning: Identifies dangerous code patterns that could lead to injection or other attacks (OWASP A05).
  • Configuration Review: Checks for common security misconfigurations (OWASP A02).
  • Use Case: Before deploying a new feature, run this scanner to ensure no sensitive credentials are accidentally committed and that the code doesn't contain common injection flaws.

Quick Start

Use the vulnerability-scanner skill to perform a full security scan on the current project directory.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for security vulnerabilities and hardcoded secrets?▼

To scan for security vulnerabilities and hardcoded secrets, you run an automated scanner on your project directory. This identifies known dependency exploits, hardcoded API keys, and dangerous code patterns to secure your software supply chain.

Can I detect OWASP security misconfigurations and injection flaws automatically?▼

Yes, you can detect OWASP security misconfigurations and injection flaws automatically. The scanner analyzes your code patterns to identify risks like injection attacks and reviews configurations to ensure compliance with security best practices.

How do I check project dependencies for known exploits before deployment?▼

You check project dependencies for known exploits by running a dependency analysis scan. This process identifies vulnerabilities related to known exploits (OWASP A03) within your software projects, preventing potential breaches before deployment.

What is the best way to find hardcoded API keys and passwords in my source code?▼

The best way to find hardcoded API keys and passwords is through automated secret detection. This scans your codebase to locate sensitive credentials (OWASP A04), ensuring no secrets are accidentally committed.

Does this vulnerability scanner require any external dependencies to run?▼

No, this vulnerability scanner does not require any external dependencies to run. It utilizes built-in Python scripts to perform security checks, analyze dependencies, and review configurations without needing additional packages.

Why should I run a security scan before deploying a new feature?▼

You should run a security scan before deploying a new feature to ensure no sensitive credentials are accidentally committed and that the code doesn't contain common injection flaws. This reduces the risk of breaches and ensures compliance.

Related Skills

Explore More Software Engineering Skills→
bcastelinobcastelino
2

vulnerability-scanner

Scan codebases and infrastructure for security vulnerabilities with Python scripts.

Community
Advanced
abhijeetkakade1234abhijeetkakade1234
1

redteam-attack

Analyze technical systems for security vulnerabilities and generate prioritized .docx remediation reports.

Community
Advanced
matteocervellimatteocervelli
25

security-scanner

Scan codebases for secrets, vulnerable dependencies, and insecure patterns.

Community
Advanced
KaakatiKaakati
2

security-auditor

Audit code for security vulnerabilities, exposed secrets, and compliance gaps.

Community
Advanced