skills.rest
Postalocity
PostalocityOFFICIAL
Explore all skills by this author →
GitHub

vulnerability-scanner

Automate vulnerability analysis with scripts/security_scan.py and checklists.md.

1|Updated Mar 5, 2026
Search Tags:#security#vulnerability#owasp#ci-cd#analyze#attack-surface#risk-prioritization
One-click install
npx skills add https://github.com/Postalocity/template-microsite --skill vulnerability-scanner-postalocity
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/Postalocity/template-microsite/tree/main/.opencode/integrations/vulnerability-scanner
Command: npx skills add https://github.com/Postalocity/template-microsite --skill vulnerability-scanner-postalocity

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

Automates vulnerability analysis to identify and prioritize security risks in software projects, aligning with OWASP 2025 guidelines and supply chain considerations.

Core Features & Use Cases

  • Threat modeling, attack surface mapping, and risk prioritization to guide remediation.
  • CI/CD integration with deterministic outputs for traceable security validation.
  • Use Case: scan a codebase and its dependencies to surface critical vulnerabilities and suggest mitigations.

Quick Start

Run the security_scan.py script on your project path to begin an automated vulnerability assessment.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate vulnerability analysis on a software project codebase?▼

Automate vulnerability analysis by running the security_scan.py script against your project path to identify and prioritize security risks across the codebase and its dependencies.

What's the best way to map an attack surface and prioritize risk for remediation?▼

Attack surface mapping and risk prioritization are handled by the automated vulnerability assessment, which surfaces critical vulnerabilities and suggests mitigations based on OWASP 2025 alignment.

Can I integrate vulnerability scanning into a CI/CD pipeline with deterministic outputs?▼

CI/CD integration is supported with deterministic outputs for traceable security validation, allowing automated vulnerability analysis to run consistently within your pipeline.

Does this vulnerability scanner assess supply chain security and OWASP 2025 compliance?▼

Supply chain security assessment and OWASP 2025 alignment are core capabilities of the vulnerability analysis, covering both codebase threats and dependency risks.

What do I need to run an automated vulnerability assessment on my code?▼

You need a project path to supply to the security_scan.py runtime script, along with the references checklist (checklists.md) to guide the automated vulnerability assessment process.

Are there limitations to using automated vulnerability analysis for threat modeling?▼

Automated vulnerability analysis provides deterministic outputs for threat modeling and risk prioritization, but results depend on the codebase and dependency scope supplied to the security_scan.py script.

Related Skills

Explore More Software Engineering Skills→
lucasFR2lucasFR2

vulnerability-scanner

Automate vulnerability scanning and risk assessment for applications using OWASP 2025.

Community
Advanced
augustoheissaugustoheiss

agency-security-engineer

Identify and remediate application security risks in web and cloud-native systems.

Community
Advanced
skeletorfletskeletorflet
7

vulnerability-scanner

Analyze dependencies, secrets, and code patterns to generate prioritized vulnerability reports.

Community
Advanced
keshavraj936keshavraj936

vulnerability-scanner

Scan software projects for vulnerabilities and prioritize risks using OWASP 2025 principles.

Community
Advanced