vulnerability-scanner

Scan software projects for vulnerabilities, outdated dependencies, and hardcoded secrets.

Updated Mar 8, 2026
One-click install
npx skills add https://github.com/roger8b/slideflow --skill vulnerability-scanner-roger8b
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/roger8b/slideflow/tree/main/.agent/skills/vulnerability-scanner
Command: npx skills add https://github.com/roger8b/slideflow --skill vulnerability-scanner-roger8b

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pypdf, pdfplumber, pdf2image, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the process of scanning and analyzing security vulnerabilities in software projects, helping developers identify and mitigate potential risks efficiently.

Core Features & Use Cases

  • Security Scanning: Automatically scan projects for common security vulnerabilities.
  • Dependency Analysis: Check for outdated or vulnerable dependencies.
  • Secret Detection: Identify hardcoded secrets and credentials in code.
  • Code Pattern Analysis: Detect dangerous code patterns that could lead to security issues.
  • Configuration Validation: Ensure that security configurations are properly set up.
  • Use Case: Use this Skill to scan a new project before deployment to ensure it meets security standards.

Quick Start

Run the vulnerability-scanner skill on your project directory to automatically scan for security vulnerabilities.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security scanning for hardcoded secrets and vulnerable dependencies?

Security scanning for hardcoded secrets and vulnerable dependencies is automated by analyzing your project directory to detect risks and dangerous code patterns. It requires Python and various security-related libraries to execute.

What is the best way to check my code for dangerous patterns before deployment?

The best way to check code for dangerous patterns before deployment is to run an automated vulnerability analysis. This process detects dangerous code patterns, hardcoded secrets, and misconfigurations to ensure your project meets security standards.

Does automated vulnerability analysis require specific Python libraries?

Yes, automated vulnerability analysis requires Python and specific security-related libraries to function. The environment also utilizes dependencies like pypdf, pdfplumber, and pdf2image to support its scanning scripts.

Can I detect hardcoded credentials and configuration issues in my software project?

Yes, you can detect hardcoded credentials and configuration issues in your software project. The tool performs secret detection to identify credentials and validates configurations to ensure security settings are properly established.

What limitations should I expect when checking for outdated dependencies?

When checking for outdated dependencies, limitations include the requirement of a Python environment and specific libraries like pypdf, pdfplumber, and pdf2image. It focuses on identifying common vulnerabilities rather than providing exhaustive penetration testing.