skills.rest
ntuan2502
ntuan2502COMMUNITY
Explore all skills by this author →
WebsiteGitHub

vulnerability-scanner

Scan project dependencies, code patterns, secrets, and configurations for vulnerabilities.

Updated Feb 6, 2026
Search Tags:#code analysis#security#vulnerability#owasp#dependencies#secrets#scanning
One-click install
npx skills add https://github.com/ntuan2502/piggy --skill vulnerability-scanner-ntuan2502
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/ntuan2502/piggy/tree/main/.agent/skills/vulnerability-scanner
Command: npx skills add https://github.com/ntuan2502/piggy --skill vulnerability-scanner-ntuan2502

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps identify and mitigate security vulnerabilities within a project by analyzing dependencies, code patterns, secrets, and configurations.

Core Features & Use Cases

  • Dependency Analysis: Checks for known vulnerabilities in project dependencies (OWASP A03).
  • Secret Detection: Scans code for hardcoded API keys, passwords, and other sensitive information (OWASP A04).
  • Code Pattern Analysis: Identifies risky code constructs like injection vulnerabilities and insecure deserialization (OWASP A05).
  • Configuration Review: Checks for common security misconfigurations (OWASP A02).
  • Use Case: Before deploying a new web application, run this Skill to ensure no critical vulnerabilities like exposed API keys or vulnerable dependencies are present.

Quick Start

Run a full security scan on the current project directory.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my project dependencies for known security vulnerabilities?▼

To scan dependencies for security vulnerabilities, this Skill analyzes your project files to detect known risks and supply chain issues according to OWASP A03. It performs automated Python-based analysis to identify outdated or compromised packages.

Can I detect hardcoded secrets and API keys in my source code?▼

Yes, you can detect hardcoded secrets and API keys by running this Skill to scan code patterns. It identifies sensitive information like passwords and tokens within your project, addressing OWASP A04 insecure design risks.

How do I check my codebase for OWASP Top 10 injection vulnerabilities?▼

This Skill checks your codebase for OWASP Top 10 injection vulnerabilities by analyzing risky code constructs. It identifies patterns like insecure deserialization and injection flaws using automated Python scripts.

Does this vulnerability scanner identify security misconfigurations in project files?▼

Yes, this vulnerability scanner identifies security misconfigurations by reviewing your project configurations. It checks for common setup flaws aligned with OWASP A02 principles to prevent exposure before deployment.

What is the best way to run a full security scan before deploying a web application?▼

The best way to run a full security scan before deploying a web application is to execute this Skill on your current project directory. It comprehensively analyzes dependencies, code patterns, secrets, and configurations.

Do I need to install any external dependencies to run this security vulnerability scan?▼

No, you do not need to install external dependencies to run this security vulnerability scan. The Skill operates using internal Python scripts and references without requiring additional environment setup.

Related Skills

Explore More Software Engineering Skills→
DaytimeBluesDaytimeBlues

vulnerability-scanner

Scan project dependencies, secrets, code patterns, and configuration files for vulnerabilities.

Community
Advanced
ActiveInferenceInstituteActiveInferenceInstitute
30

gnn-security-validation

Audit GNN pipeline security and validate access control for generated code.

Community
Advanced
KuaaMUKuaaMU
4

code-review-security

Scan Python FastAPI and React code for OWASP Top 10 vulnerabilities.

Community
Advanced
naporin0624naporin0624
3

sast-runner

Run Semgrep SAST scans on source code and produce JSON reports.

Community
Advanced