skills.rest
rahlplx
rahlplxCOMMUNITY
Explore all skills by this author →
GitHub

vulnerability-scanner

Scan codebases for dependency, secret, pattern, and configuration security risks.

Updated Feb 6, 2026
Search Tags:#OWASP#security#dependencies#configuration#patterns#secrets#scan
One-click install
npx skills add https://github.com/rahlplx/elite-astro-workforce-template --skill vulnerability-scanner-rahlplx
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/rahlplx/elite-astro-workforce-template/tree/main/.agent/skills/vulnerability-scanner
Command: npx skills add https://github.com/rahlplx/elite-astro-workforce-template --skill vulnerability-scanner-rahlplx

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill helps security teams rapidly assess a codebase for vulnerabilities by combining dependency checks, secret detection, pattern scanning, and configuration analysis.

Core Features & Use Cases

  • Dependency and supply-chain checks (lockfile verification and npm audit) to catch vulnerable packages early.
  • Secrets detection and credential exposure scanning across code and config files.
  • Threat-pattern and insecure-configuration analysis to identify risky code and misconfigurations in the project.

Quick Start

Run the security scanner against your project: python scripts/security_scan.py <project_path> --scan-type all

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for security risks and exposed secrets?▼

To scan a codebase for security risks, run a Python-based tool that checks dependencies, detects exposed secrets, and validates configuration. It analyzes code patterns to identify and prioritize vulnerabilities across your project.

What is dependency integrity checking and when do I need it for software projects?▼

Dependency integrity checking verifies lockfiles and runs npm audit to catch vulnerable packages early. You need it during development, CI/CD pipelines, or security reviews to maintain supply-chain security for software projects of any size.

Can I use automated vulnerability scanning in my CI/CD pipeline?▼

Yes, you can integrate automated vulnerability scanning into CI/CD pipelines. The Python scanner executes via command line, allowing continuous assessment of dependency, secret, code pattern, and configuration risks during software delivery.

What's the best way to detect dangerous code patterns and insecure configurations?▼

The best way to detect dangerous code patterns and insecure configurations is using an automated scanner that analyzes threat patterns and validates configuration risks. This identifies risky code and misconfigurations across your project files.

Does this security scanner work with projects of any size?▼

Yes, the security scanner is applicable to software projects of any size. It performs automated assessments by scanning dependencies, secrets, code patterns, and configuration, scaling from small development reviews to large codebases.

Related Skills

Explore More Software Engineering Skills→
jzallenjzallen
1

Pants Build System

Optimize Pants caching and target-based execution for Python projects.

Community
Advanced
Camilo8902Camilo8902

dependency-vulnerability-triage

Analyze npm audit reports and generate prioritized vulnerability remediation plans.

Community
Advanced
martinholovskymartinholovsky
45

CI/CD Pipeline Security Expert

Automate CI/CD pipeline security hardening with GitHub Actions.

Community
Advanced
vikas-gits-goodvikas-gits-good

security-audit

Scans TypeScript projects for XSS vulnerabilities, insecure deserialization, and SQL injection risks, assigning severity levels and providing code suggestions for fixes.

Community
Advanced