vulnerability-scanner

Analyze Python repositories for vulnerabilities, misconfigurations, and insecure patterns.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/pglemos/GOLFFOX --skill vulnerability-scanner-pglemos
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/pglemos/GOLFFOX/tree/main/.agent/skills/vulnerability-scanner
Command: npx skills add https://github.com/pglemos/GOLFFOX --skill vulnerability-scanner-pglemos

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires subprocess, json, re, argparse, datetime, pathlib, typing, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps security professionals and developers analyze code repositories for vulnerabilities, misconfigurations, and insecure patterns, reducing the risk of security breaches.

Core Features & Use Cases

  • Security Assessment: Performs dependency checks, secret detection, code pattern analysis, and configuration review.
  • Automated Scanning: Quickly audits code projects to identify potential security flaws.
  • Use Case: A developer receives a new project and wants to ensure it adheres to OWASP security best practices by running an automated vulnerability scan and receiving actionable reports.

Quick Start

Use the vulnerability scanner to analyze the current project directory for security issues and generate a detailed JSON report.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan a codebase for security vulnerabilities and misconfigurations?

To scan a codebase for security vulnerabilities, run this automated scanner against your project directory. It analyzes dependency integrity, secret exposure, insecure code patterns, and configuration issues, outputting a detailed JSON report to assist in threat mitigation.

What is automated dependency analysis for detecting exposed secrets?

Automated dependency analysis for exposed secrets is a security assessment process that inspects software repositories for insecure patterns and configuration flaws. This scanner evaluates dependency integrity and flags potential secret exposure to help developers mitigate risks.

Can I use Python scripts to check if my project adheres to OWASP security best practices?

You can use Python scripts to check if your project adheres to OWASP security best practices by running this vulnerability scanner. It requires Python scripts and configuration files to perform comprehensive security assessments and identify potential flaws.

What is the best way to audit code projects for insecure coding patterns?

The best way to audit code projects for insecure coding patterns is using an automated vulnerability scanner. It quickly performs code pattern analysis and configuration reviews, identifying security risks and generating actionable reports for security teams.

Does automated vulnerability scanning require specific configuration files to run?

Automated vulnerability scanning requires Python scripts and configuration files to perform a comprehensive assessment. These inputs allow the scanner to accurately evaluate dependency integrity, detect exposed secrets, and identify misconfigurations.

Why should security teams review JSON reports generated from code security scans?

Security teams should review JSON reports from code security scans because they provide structured, actionable details on identified vulnerabilities and misconfigurations. This detailed output assists developers in understanding and mitigating security risks effectively.