skills.rest
phuonghx
phuonghxCOMMUNITY
Explore all skills by this author →
GitHub

vulnerability-scanner

Scan source code, configuration files, and dependencies for security vulnerabilities.

1|Updated Jun 23, 2026
Search Tags:#secure coding#dependency check#vulnerability management#security scanning#secret detection
One-click install
npx skills add https://github.com/phuonghx/aim-cli --skill vulnerability-scanner-phuonghx
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/phuonghx/aim-cli/tree/main/aim/templates/aim-agents/skills/vulnerability-scanner
Command: npx skills add https://github.com/phuonghx/aim-cli --skill vulnerability-scanner-phuonghx

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pypdf, pdfplumber, pdf2image, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the process of security review and vulnerability scanning, identifying potential security risks in your projects.

Core Features & Use Cases

  • Security Scanning: Identifies security vulnerabilities such as broken access control, security misconfiguration, and cryptographic failures.
  • Dependency Checks: Verifies the integrity of dependencies and checks for known vulnerabilities.
  • Secrets Detection: Detects hardcoded credentials and keys in source code and configuration files.
  • Code Pattern Analysis: Identifies risky code constructs that could lead to security breaches.
  • Configuration Review: Inspects configuration files for insecure settings and missing security headers.
  • Use Case: Use this Skill to scan your codebase and configuration files for vulnerabilities, ensuring that your project is secure against common threats.

Quick Start

Run the vulnerability-scanner skill to scan your project directory for security vulnerabilities.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my source code for security vulnerabilities and hardcoded secrets?▼

Security scanning identifies vulnerabilities in source code by analyzing risky code patterns, broken access control, and cryptographic failures. It also detects hardcoded credentials and keys to prevent potential security breaches in your software projects.

What is dependency checking in vulnerability management?▼

Dependency checking in vulnerability management verifies the integrity of project dependencies and checks them against known vulnerability databases. This process ensures your software projects remain secure against threats introduced through third-party libraries.

Can I use automated security review to inspect configuration files for insecure settings?▼

Yes, automated security review can inspect configuration files for insecure settings and missing security headers. This configuration review identifies security misconfigurations to help ensure your project is secure against common threats.

Does code pattern analysis detect broken access control and cryptographic failures?▼

Yes, code pattern analysis detects broken access control and cryptographic failures by identifying risky code constructs. This analysis targets software engineering workflows involving secure coding practices to prevent potential security breaches.

What are the limitations of automated security scanning for secure coding practices?▼

Automated security scanning focuses on identifying known vulnerabilities, dependency risks, and hardcoded secrets through code pattern analysis. It requires scanning source code and configuration files but may not detect complex business logic flaws without explicit insecure code constructs.

Related Skills

Explore More Software Engineering Skills→
brenordvbrenordv

security

Audit software systems for security vulnerabilities and regulatory compliance.

Community
Advanced
89jobrien89jobrien
4

dependency-management

Analyze dependency manifests to update packages, scan vulnerabilities, and verify licenses.

Community
Intermediate
proffesor-for-testingproffesor-for-testing
436

security-testing

Test software security vulnerabilities using OWASP principles.

Community
Advanced
matteocervellimatteocervelli
25

security-scanner

Scan codebases for secrets, vulnerable dependencies, and insecure patterns.

Community
Advanced