skills.rest
pratikrath126
pratikrath126COMMUNITY
Explore all skills by this author →
GitHub

vulnerability-scanner

Scan dependencies, secrets, code patterns, and configuration for security vulnerabilities.

42|3|Updated Feb 13, 2026
Search Tags:#automation#security#vulnerability#owasp#code-analysis#scanning
One-click install
npx skills add https://github.com/pratikrath126/ai-image-detector --skill vulnerability-scanner-pratikrath126
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/pratikrath126/ai-image-detector/tree/main/.agent/kit-skills/vulnerability-scanner
Command: npx skills add https://github.com/pratikrath126/ai-image-detector --skill vulnerability-scanner-pratikrath126

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Vulnerability-scanner helps development teams identify, validate, and prioritize security risks in software projects by scanning dependencies, secrets, code patterns, and configuration.

Core Features & Use Cases

  • Dependency risk checks: Validate supply chain integrity and alert on missing lock files or known vulnerabilities.
  • Secrets scanning: Detect hardcoded keys, tokens, passwords, and cloud credentials.
  • Code pattern detection: Flag dangerous patterns like eval/exec, unsafe deserialization, and injection risks.
  • Configuration security checks: Validate security-related config and headers, with CI-friendly outputs.
  • Use Case: Integrate into CI pipelines to fail builds on critical findings and generate structured reports.

Quick Start

Run the vulnerability-scanner against your project to generate a comprehensive security findings report.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for security vulnerabilities and hardcoded secrets?▼

Automated vulnerability scanning detects hardcoded secrets and security risks by evaluating dependencies, code patterns, and configuration across web and backend codebases. It flags dangerous patterns like eval/exec and unsafe deserialization for risk-based remediation.

Can I integrate vulnerability scanning into CI pipelines to fail builds on critical findings?▼

Yes, vulnerability scanning integrates into CI pipelines to fail builds on critical findings. The scanner provides CI-friendly JSON-formatted findings suitable for automated security gates and dashboards.

What is dependency risk checking and how does it validate supply chain integrity?▼

Dependency risk checking validates supply chain integrity by alerting on missing lock files and known vulnerabilities. It assesses project dependencies to enable risk-based remediation of vulnerable packages.

Does automated vulnerability scanning work for both web and backend codebases?▼

Automated vulnerability scanning works across web and backend codebases. It assesses dependencies, secrets, dangerous code patterns, and configuration to provide modular and extensible security checks.

What are the limitations of automated code pattern detection for security vulnerabilities?▼

Code pattern detection is limited to flagging known dangerous patterns like eval/exec, unsafe deserialization, and injection risks. It provides risk-based findings but may require manual validation for complex logic flaws.

Related Skills

Explore More Software Engineering Skills→
GeneralReasoningGeneralReasoning
4

trivy-offline-vulnerability-scanning

Scan dependency lock files offline with Trivy and JSON output.

Official
Intermediate
DonTiziDonTizi
2

security-audit

Scan codebases for secrets, OWASP risks, and vulnerable dependencies.

Community
Advanced
walker-hzxwalker-hzx

security-verification

Identify and remediate security vulnerabilities in source code.

Community
Advanced
djankiesdjankies

reviewing-dependencies

Detect unused, outdated, and vulnerable dependencies in npm projects.

Community
Advanced