skills.rest
nishchaydev
nishchaydevCOMMUNITY
Explore all skills by this author →
GitHub

vulnerability-scanner

Scan codebases for dependencies, secrets, and dangerous patterns, outputting structured JSON findings.

Updated Feb 2, 2026
Search Tags:#OWASP#security scanning#secrets detection#supply chain security#risk prioritization#attack surface mapping
One-click install
npx skills add https://github.com/nishchaydev/emitra --skill vulnerability-scanner-nishchaydev
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/nishchaydev/emitra/tree/main/.agent/skills/vulnerability-scanner
Command: npx skills add https://github.com/nishchaydev/emitra --skill vulnerability-scanner-nishchaydev

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires subprocess, json, os, sys, re, argparse, pathlib, typing, datetime, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps teams identify real-world security weaknesses by thinking like an attacker, mapping the attack surface, and prioritizing vulnerabilities by impact and likelihood.

Core Features & Use Cases

  • Supply chain and dependency risk validation: Detects missing lock files and surfaces dependency vulnerabilities to address OWASP A03.
  • Secrets exposure scanning: Searches code and configuration files for high-risk credentials and tokens to reduce OWASP A04 risk.
  • Dangerous pattern detection & prioritization: Flags insecure coding patterns (injection, XSS indicators, insecure deserialization) and supports risk-focused reporting.
  • Configuration security checks: Reviews common insecure settings and checks for security-header configuration signals aligned to OWASP A02.

Quick Start

Run the vulnerability scanner against a target project directory using: python scripts/security_scan.py <project_path>.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan for secrets and dependency vulnerabilities in a codebase?▼

The scanner identifies security weaknesses by mapping the attack surface, validating OWASP 2025 focus areas like supply chain risks, detecting exposed credentials, and prioritizing dangerous coding patterns for structured remediation planning.

How do I map the attack surface and prioritize security risks before a release?▼

The scanner identifies security weaknesses by mapping the attack surface, validating OWASP 2025 focus areas like supply chain risks, detecting exposed credentials, and prioritizing dangerous coding patterns for structured remediation planning.

Can I use this security scanner to check for OWASP A02 and A03 configuration issues?▼

Yes, you can use this security scanner to check for OWASP A02 and A03 issues, as it specifically validates insecure configuration settings and surfaces dependency vulnerabilities to address supply chain risks.

Does the vulnerability scanner require Python dependencies to run?▼

The vulnerability scanner requires standard Python libraries including subprocess, json, os, sys, re, argparse, and pathlib, meaning it operates without installing external packages beyond the standard Python environment.

What is the best way to generate structured JSON findings for security remediation?▼

The best way to generate structured JSON findings for remediation is to run the scanner on your project directory, which validates dangerous patterns and configuration signals, outputting structured JSON data.

Related Skills

Explore More Software Engineering Skills→
MatrixFounderMatrixFounder
4

skill-reverse-engineering

Scan directory structures and synthesize file summaries to regenerate architecture documentation.

Community
Intermediate
matteocervellimatteocervelli
25

planning-doc-generator

Generate project assessment Markdown reports from structured JSON data.

Community
Intermediate
wodehwodeh

cso

Audit infrastructure security with OWASP and STRIDE threat modeling.

Community
Advanced
matteocervellimatteocervelli
25

security-scanner

Scan codebases for secrets, vulnerable dependencies, and insecure patterns.

Community
Advanced