vulnerability-scanner

Identify and prioritize security vulnerabilities in software projects.

Updated Jan 27, 2026
One-click install
npx skills add https://github.com/Oscar-Ivan-Salas/PILi_Quarts_Doc --skill vulnerability-scanner-oscar-ivan-salas
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/Oscar-Ivan-Salas/PILi_Quarts_Doc/tree/main/PILi_Quarts_V3.0/.agent/skills/vulnerability-scanner
Command: npx skills add https://github.com/Oscar-Ivan-Salas/PILi_Quarts_Doc --skill vulnerability-scanner-oscar-ivan-salas

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Vulnerability-scanner helps teams identify and prioritize security risks in software projects, aligning with OWASP 2025 and supply chain security considerations.

Core Features & Use Cases

  • Attack surface mapping: identify entry points, data flows, and trust boundaries.
  • Risk prioritization: triage findings using a structured scoring scheme and actionable remediation guidance.
  • Continuous scanning: integrates with CI/CD and supports detection of secret leakage, misconfigurations, and vulnerable dependencies.

Quick Start

Run vulnerability-scanner on your project to generate a prioritized security findings report.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify and prioritize security vulnerabilities in a CI/CD pipeline?

Security vulnerabilities in a CI/CD pipeline are identified and prioritized by mapping attack surfaces, assessing risk via structured scoring, and detecting vulnerable dependencies. This generates a reproducible findings report aligned with OWASP 2025.

What is attack surface mapping for containerized deployments?

Attack surface mapping for containerized deployments is the process of identifying entry points, data flows, and trust boundaries. It helps assess risk and detect misconfigurations to guide remediation for containerized environments.

Does this vulnerability scanner detect secret leakage and misconfigurations?

Yes, continuous scanning with this vulnerability scanner detects secret leakage, misconfigurations, and vulnerable dependencies. It maps attack surfaces and triages findings to provide actionable remediation guidance.

How do I triage software security findings using a structured risk scoring scheme?

Software security findings are triaged using a structured risk scoring scheme that assesses vulnerabilities and maps attack surfaces. This risk prioritization workflow generates actionable remediation guidance aligned with supply-chain security.

Can I automate supply-chain security scanning for web applications?

Yes, supply-chain security scanning can be automated for web applications by integrating continuous scanning into CI/CD pipelines. It identifies entry points, assesses risk, and detects vulnerable dependencies aligned with OWASP 2025.

What is the best way to align security risk prioritization with OWASP 2025?

The best way to align security risk prioritization with OWASP 2025 is to apply a structured risk scoring scheme to mapped attack surfaces. This generates reproducible findings and actionable remediation guidance for software projects.