vulnerability-scanner

Scan project dependencies, code patterns, secrets, and configurations for security vulnerabilities.

Updated Dec 24, 2025
One-click install
npx skills add https://github.com/OmarMira/Coontabilidad --skill vulnerability-scanner-omarmira
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/OmarMira/Coontabilidad/tree/main/.agent/skills/vulnerability-scanner
Command: npx skills add https://github.com/OmarMira/Coontabilidad --skill vulnerability-scanner-omarmira

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the critical need for identifying and mitigating security vulnerabilities within a project, ensuring robust defense against modern cyber threats.

Core Features & Use Cases

  • Comprehensive Scanning: Analyzes dependencies, hardcoded secrets, dangerous code patterns, and misconfigurations.
  • Threat Modeling: Guides users through attacker mindset and risk prioritization.
  • Use Case: Before deploying a new web application, run this Skill to scan its codebase and dependencies for common vulnerabilities like SQL injection, exposed API keys, or outdated libraries, providing actionable insights for remediation.

Quick Start

Use the vulnerability-scanner skill to perform a full security scan on the current project directory.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for hardcoded secrets and vulnerable dependencies?

To scan for hardcoded secrets and vulnerable dependencies, run an automated security vulnerability analysis across your project directory to identify credential exposure and supply chain risks. This process checks code patterns and configurations against known threat models.

What is security vulnerability scanning for OWASP Top 10 risks?

Security vulnerability scanning for OWASP Top 10 risks is the automated detection of injection flaws, misconfigurations, and exposed credentials within code. It analyzes dependencies and code patterns to provide actionable insights for mitigating modern cyber threats.

Can I use automated code scanning to prioritize security threats before deployment?

Yes, you can use automated code scanning to prioritize security threats before deployment by applying threat modeling principles. It identifies supply chain security risks and misconfigurations, guiding you to focus on the most critical remediation tasks.

Does dependency check scanning work without external security tools?

Dependency check scanning works without external security tools by analyzing your local project directory directly. It identifies outdated libraries and vulnerable code patterns internally, adhering to OWASP Top 10 principles to flag supply chain vulnerabilities.

What's the best way to detect SQL injection and exposed API keys in my project?

The best way to detect SQL injection and exposed API keys is to perform a comprehensive code pattern and configuration scan. This identifies dangerous injection flaws and hardcoded credentials, providing actionable remediation insights before deployment.