skills.rest
raccioly
racciolyCOMMUNITY
Explore all skills by this author →
GitHub

vulnerability-scanner

Scan software projects for vulnerabilities in dependencies, secrets, code patterns, and configurations.

Updated Mar 18, 2026
Search Tags:#security#vulnerability#owasp#secrets#code-patterns#dependency#scanner
One-click install
npx skills add https://github.com/raccioly/coach-gravity --skill vulnerability-scanner-raccioly
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/raccioly/coach-gravity/tree/main/content/starter-kit/skills/vulnerability-scanner
Command: npx skills add https://github.com/raccioly/coach-gravity --skill vulnerability-scanner-raccioly

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill identifies security vulnerabilities in software projects, enabling teams to detect weaknesses early in the development lifecycle.

Core Features & Use Cases

  • Dependency integrity checks for supply chain security (A03)
  • Secrets scanning to detect hard-coded credentials
  • Threat pattern detection for risky code and insecure configurations
  • Threat modeling and risk prioritization guidance for remediation

Quick Start

Run python scripts/security_scan.py <project_path> to perform a full security validation.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for security vulnerabilities and hard-coded secrets?▼

A security vulnerability scanner identifies weaknesses in software projects by checking dependencies, detecting hard-coded secrets, scanning dangerous code patterns, and assessing configuration risks to enable early remediation.

Can I use this vulnerability scanner for npm and Python CI pipelines?▼

Yes, this vulnerability scanner applies to repository codebases and CI pipelines, specifically supporting common ecosystems such as npm and Python projects for continuous security validation.

How do I perform a dependency integrity check to prevent supply chain attacks?▼

Perform a dependency integrity check by running the security scan script, which evaluates project dependencies against supply chain security risks mapped to OWASP A03 categories to identify vulnerable packages.

What types of security risks does a code pattern and configuration scanner detect?▼

A code pattern and configuration scanner detects security risks by scanning for dangerous code patterns and insecure configurations, providing threat modeling and risk prioritization guidance for remediation.

Do I need any external dependencies to run the security scanner locally?▼

No external dependencies are required to run the security scanner locally; it operates using internal scripts and references to validate your software project without additional environment setup.

Related Skills

Explore More Software Engineering Skills→
Tonybleything76Tonybleything76

CI/CD Pipeline Builder

Generate CI/CD pipeline YAML for GitHub Actions and GitLab CI.

Community
Intermediate
mtsatryanmtsatryan
1

security-auditor

Identify and remediate security vulnerabilities and compliance gaps across applications, infrastructure, and code.

Community
Advanced
AradotsoAradotso
11

npm-security-best-practices

Harden npm, pnpm, and Bun installs against supply-chain attacks.

Official
Advanced
HouseGarofaloHouseGarofalo
3

security-auditor-agent

Audit application and infrastructure security against OWASP Top 10 and compliance frameworks.

Official
Advanced