vulnerability-scanner

Scan project dependencies, code patterns, secrets, and configurations for vulnerabilities.

Updated Feb 6, 2026

Search Tags:#code analysis #security #vulnerability #owasp #dependencies #secrets #scanning

Ready to run

npx skills add https://github.com/ntuan2502/piggy --skill vulnerability-scanner-ntuan2502

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/ntuan2502/piggy/tree/main/.agent/skills/vulnerability-scanner
Command: npx skills add https://github.com/ntuan2502/piggy --skill vulnerability-scanner-ntuan2502

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps identify and mitigate security vulnerabilities within a project by analyzing dependencies, code patterns, secrets, and configurations.

Core Features & Use Cases

Dependency Analysis: Checks for known vulnerabilities in project dependencies (OWASP A03).
Secret Detection: Scans code for hardcoded API keys, passwords, and other sensitive information (OWASP A04).
Code Pattern Analysis: Identifies risky code constructs like injection vulnerabilities and insecure deserialization (OWASP A05).
Configuration Review: Checks for common security misconfigurations (OWASP A02).
Use Case: Before deploying a new web application, run this Skill to ensure no critical vulnerabilities like exposed API keys or vulnerable dependencies are present.

Quick Start

Run a full security scan on the current project directory.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan my project dependencies for known security vulnerabilities?▼

To scan dependencies for security vulnerabilities, this Skill analyzes your project files to detect known risks and supply chain issues according to OWASP A03. It performs automated Python-based analysis to identify outdated or compromised packages.

Can I detect hardcoded secrets and API keys in my source code?▼

Yes, you can detect hardcoded secrets and API keys by running this Skill to scan code patterns. It identifies sensitive information like passwords and tokens within your project, addressing OWASP A04 insecure design risks.

How do I check my codebase for OWASP Top 10 injection vulnerabilities?▼

This Skill checks your codebase for OWASP Top 10 injection vulnerabilities by analyzing risky code constructs. It identifies patterns like insecure deserialization and injection flaws using automated Python scripts.

Does this vulnerability scanner identify security misconfigurations in project files?▼

Yes, this vulnerability scanner identifies security misconfigurations by reviewing your project configurations. It checks for common setup flaws aligned with OWASP A02 principles to prevent exposure before deployment.

What is the best way to run a full security scan before deploying a web application?▼

The best way to run a full security scan before deploying a web application is to execute this Skill on your current project directory. It comprehensively analyzes dependencies, code patterns, secrets, and configurations.

Do I need to install any external dependencies to run this security vulnerability scan?▼

No, you do not need to install external dependencies to run this security vulnerability scan. The Skill operates using internal Python scripts and references without requiring additional environment setup.