skills.rest
ofelixdev
ofelixdevCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

vulnerability-scanner

Scan project dependencies, hardcoded secrets, code patterns, and configurations for security vulnerabilities.

Updated Feb 24, 2026
Search Tags:#code analysis#security#vulnerability#owasp#dependencies#secrets#scan
One-click install
npx skills add https://github.com/ofelixdev/cc-kit --skill vulnerability-scanner-ofelixdev
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/ofelixdev/cc-kit/tree/main/template/skills/vulnerability-scanner
Command: npx skills add https://github.com/ofelixdev/cc-kit --skill vulnerability-scanner-ofelixdev

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the process of identifying potential security vulnerabilities within a project, helping to prevent security breaches and ensure compliance with best practices.

Core Features & Use Cases

  • Dependency Security: Analyzes project dependencies for known vulnerabilities (OWASP A03).
  • Secret Detection: Scans code and configuration files for hardcoded secrets like API keys and passwords (OWASP A04).
  • Code Pattern Analysis: Identifies dangerous code patterns that could lead to injection, XSS, or other exploits (OWASP A05).
  • Configuration Review: Checks for common security misconfigurations in project settings.
  • Use Case: Before deploying a new web application, run this Skill to get an automated report on potential security flaws in its dependencies, code, and configuration.

Quick Start

Run the security scan on the current project directory.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my project for hardcoded secrets and API keys?▼

To scan for hardcoded secrets, this Skill analyzes your code and configuration files to detect exposed credentials like API keys and passwords. It automates the identification of sensitive data to prevent credential exposure.

What is the best way to check project dependencies for known vulnerabilities?▼

Checking project dependencies for known vulnerabilities involves analyzing your dependency tree against security databases. This Skill addresses supply chain security by identifying outdated or compromised packages using Python scripts.

Can I detect security misconfigurations and dangerous code patterns automatically?▼

Yes, you can detect security misconfigurations and dangerous code patterns automatically. The Skill reviews project configurations and identifies dangerous code patterns that could lead to injection or XSS exploits.

Does the vulnerability scanner require specific security tools or dependencies to run?▼

No external security tools or dependencies are required to run the vulnerability scanner. The Skill operates independently using its built-in Python scripts to perform comprehensive analysis on your project directory.

How do I identify OWASP security risks in my codebase before deployment?▼

To identify OWASP security risks before deployment, run an automated security scan on your project directory. The Skill validates against OWASP standards including dependency vulnerabilities, secret exposure, and injection risks.

Related Skills

Explore More Software Engineering Skills→
az9713az9713

tiger-dependency-map

Map key people to deliverables and identify single points of failure.

Community
Advanced
arroschavesarroschaves
1

vulnerability-scanner

Scan code dependencies, secrets, patterns, and misconfigurations for vulnerabilities.

Community
Advanced
martinholovskymartinholovsky
45

CI/CD Pipeline Security Expert

Automate CI/CD pipeline security hardening with GitHub Actions.

Community
Advanced
kivo360kivo360
1

moai-domain-security

Mitigate security vulnerabilities in CI/CD pipelines using OWASP Top 10 and SAST/DAST workflows.

Community
Advanced