skills.rest
paulojalowyj
paulojalowyjCOMMUNITY
Explore all skills by this author →
Website𝕏@paulojalowyjGitHub

vulnerability-scanner

Scan dependencies, secrets, code patterns, and configurations for security vulnerabilities.

6|Updated Feb 6, 2026
Search Tags:#code analysis#security#vulnerability#owasp#secrets#scanning#supply chain
One-click install
npx skills add https://github.com/paulojalowyj/openkit --skill vulnerability-scanner-paulojalowyj
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/paulojalowyj/openkit/tree/main/.opencode/skills/vulnerability-scanner
Command: npx skills add https://github.com/paulojalowyj/openkit --skill vulnerability-scanner-paulojalowyj

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps identify and prioritize security vulnerabilities within a project, moving beyond simple dependency checks to analyze code patterns, configurations, and supply chain risks.

Core Features & Use Cases

  • Comprehensive Scanning: Analyzes dependencies, hardcoded secrets, dangerous code patterns, and misconfigurations.
  • Risk Prioritization: Uses CVSS, EPSS, and asset value to rank vulnerabilities.
  • Use Case: Before deploying a new feature, run this scanner to ensure no critical secrets are exposed, no injection vulnerabilities exist in new code, and that the application's configuration adheres to security best practices.

Quick Start

Run a full security scan on the current project directory.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my project for hardcoded secrets and security vulnerabilities?▼

To scan for hardcoded secrets and security vulnerabilities, you run an automated analysis across dependencies, code patterns, and configurations to identify exposed credentials and supply chain risks.

What is the best way to check a codebase for OWASP Top 10 injection flaws?▼

The best way to check for OWASP Top 10 injection flaws is performing automated security vulnerability scanning that analyzes dangerous code patterns and validates adherence to secure configuration principles.

Can I prioritize security vulnerabilities using CVSS and EPSS scores in a local scan?▼

Yes, you can prioritize security vulnerabilities by running a comprehensive scan that uses CVSS, EPSS, and asset value to rank risks and provide actionable insights for mitigation.

Does automated security vulnerability scanning detect supply chain risks in dependencies?▼

Yes, automated security vulnerability scanning detects supply chain risks by analyzing your project dependencies to identify integrity issues and prioritize them alongside code pattern flaws.

How do I find insecure configurations in my application before deployment?▼

You find insecure configurations by running a full security scan on your project directory, which validates settings against security best practices and flags misconfigurations before deployment.

What distinguishes comprehensive vulnerability scanning from simple dependency checks?▼

Comprehensive vulnerability scanning moves beyond simple dependency checks by analyzing hardcoded secrets, dangerous code patterns, misconfigurations, and supply chain risks to prioritize mitigation efforts.

Related Skills

Explore More Software Engineering Skills→
AidenSbVevoAidenSbVevo
1

semgrep

Run parallelized Semgrep static analysis and merge SARIF results.

Community
Advanced
KaakatiKaakati
2

security-auditor

Audit code for security vulnerabilities, exposed secrets, and compliance gaps.

Community
Advanced
HeldinhowHeldinhow
4

security-audit

Scan dependencies and test OWASP Top 10 risks in applications.

Community
Intermediate
nimadorostkarnimadorostkar
25

secrets-management

Implement secure storage, runtime injection, and automated rotation for credentials.

Community
Advanced