vulnerability-scanner

Scan dependencies, secrets, code patterns, and configuration for security vulnerabilities.

42|3|Updated Feb 13, 2026

Search Tags:#automation #security #vulnerability #owasp #code-analysis #scanning

Ready to run

npx skills add https://github.com/pratikrath126/ai-image-detector --skill vulnerability-scanner-pratikrath126

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/pratikrath126/ai-image-detector/tree/main/.agent/kit-skills/vulnerability-scanner
Command: npx skills add https://github.com/pratikrath126/ai-image-detector --skill vulnerability-scanner-pratikrath126

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Vulnerability-scanner helps development teams identify, validate, and prioritize security risks in software projects by scanning dependencies, secrets, code patterns, and configuration.

Core Features & Use Cases

Dependency risk checks: Validate supply chain integrity and alert on missing lock files or known vulnerabilities.
Secrets scanning: Detect hardcoded keys, tokens, passwords, and cloud credentials.
Code pattern detection: Flag dangerous patterns like eval/exec, unsafe deserialization, and injection risks.
Configuration security checks: Validate security-related config and headers, with CI-friendly outputs.
Use Case: Integrate into CI pipelines to fail builds on critical findings and generate structured reports.

Quick Start

Run the vulnerability-scanner against your project to generate a comprehensive security findings report.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan my codebase for security vulnerabilities and hardcoded secrets?▼

Automated vulnerability scanning detects hardcoded secrets and security risks by evaluating dependencies, code patterns, and configuration across web and backend codebases. It flags dangerous patterns like eval/exec and unsafe deserialization for risk-based remediation.

Can I integrate vulnerability scanning into CI pipelines to fail builds on critical findings?▼

Yes, vulnerability scanning integrates into CI pipelines to fail builds on critical findings. The scanner provides CI-friendly JSON-formatted findings suitable for automated security gates and dashboards.

What is dependency risk checking and how does it validate supply chain integrity?▼

Dependency risk checking validates supply chain integrity by alerting on missing lock files and known vulnerabilities. It assesses project dependencies to enable risk-based remediation of vulnerable packages.

Does automated vulnerability scanning work for both web and backend codebases?▼

Automated vulnerability scanning works across web and backend codebases. It assesses dependencies, secrets, dangerous code patterns, and configuration to provide modular and extensible security checks.

What are the limitations of automated code pattern detection for security vulnerabilities?▼

Code pattern detection is limited to flagging known dangerous patterns like eval/exec, unsafe deserialization, and injection risks. It provides risk-based findings but may require manual validation for complex logic flaws.