vulnerability-scanner

Scan project codebases for vulnerabilities in dependencies, secrets, and configurations.

1|Updated Mar 14, 2026
One-click install
npx skills add https://github.com/R2W1cs/Mustacademy --skill vulnerability-scanner-r2w1cs
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/R2W1cs/Mustacademy/tree/main/a/.agent/skills/vulnerability-scanner
Command: npx skills add https://github.com/R2W1cs/Mustacademy --skill vulnerability-scanner-r2w1cs

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pypdf, pdfplumber, pdf2image, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill performs comprehensive vulnerability scanning, identifying and prioritizing security risks in your projects.

Core Features & Use Cases

  • Advanced Vulnerability Analysis: Utilizes OWASP 2025 principles, supply chain security, and attack surface mapping.
  • Custom Scripts: Executes runtime scripts for automated validation and scanning.
  • Reference Files: Provides checklists and guidelines for security audits.
  • Use Case: Integrate this Skill into your CI/CD pipeline to scan new commits for security vulnerabilities before deployment.

Quick Start

Run the vulnerability-scanner skill on your project directory to get a comprehensive security report.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for security vulnerabilities and hardcoded secrets?

To scan your codebase for security vulnerabilities and hardcoded secrets, run the scanner on your project directory to automatically check dependencies, code patterns, and configurations. It generates a comprehensive security report.

How does OWASP 2025 apply to supply chain security and attack surface mapping?

OWASP 2025 applies to supply chain security by guiding the scanner to prioritize risks in dependencies and map the project's attack surface. This approach identifies exposed vulnerabilities before deployment.

Do I need Python to run automated vulnerability scanning on my project?

Yes, you need Python installed to run automated vulnerability scanning. The scanner executes custom Python runtime scripts to validate dependencies and check for security flaws in your codebase.

Can I integrate vulnerability scanning into my CI/CD pipeline?

Yes, you can integrate vulnerability scanning into your CI/CD pipeline to analyze new commits. This prevents deployment by checking code patterns and dependencies against security guidelines before release.

What is the best way to check dependencies for supply chain risks?

The best way to check dependencies for supply chain risks is using an automated scanner that applies OWASP 2025 principles. It validates dependencies using custom Python scripts to identify vulnerable components.