skills.rest
sharkitect-solutions
sharkitect-solutionsCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

vulnerability_scanner

Scan codebases for OWASP Top 10 vulnerabilities and prioritize risks using CVSS and EPSS scoring.

Updated Aug 23, 2026
Search Tags:#security#vulnerability#owasp#risk assessment#code audit#scanning
One-click install
npx skills add https://github.com/sharkitect-solutions/sharkitect-claude-toolkit --skill vulnerability-scanner-sharkitect-solutions
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vulnerability_scanner
Source: https://github.com/sharkitect-solutions/sharkitect-claude-toolkit/tree/main/skills/vulnerability-scanner
Command: npx skills add https://github.com/sharkitect-solutions/sharkitect-claude-toolkit --skill vulnerability-scanner-sharkitect-solutions

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires npm, pip, cargo, snyk, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps identify security vulnerabilities in codebases, map potential attack surfaces, and prioritize risks, ensuring a more secure application.

Core Features & Use Cases

  • Vulnerability Assessment: Scans code for common security flaws using OWASP guidelines.
  • Attack Surface Mapping: Identifies potential entry points and trust boundaries.
  • Risk Prioritization: Scores vulnerabilities based on CVSS, exploitability, and business impact.
  • Use Case: Before deploying a new feature, use this Skill to perform a security audit, identify potential risks like SQL injection or broken access control, and get actionable remediation steps.

Quick Start

Run a full security scan on the current project directory.

Frequently Asked Questions about vulnerability_scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for OWASP Top 10 security vulnerabilities?▼

Vulnerability risk prioritization uses CVSS and EPSS scoring alongside business impact analysis to rank identified security weaknesses, ensuring the most exploitable and critical attack surface entry points are addressed first.

Can I run a security audit and map attack surfaces before deploying a new feature?▼

This approach uses a structured methodology covering reconnaissance, discovery, analysis, and reporting, running specific scripts for automated pattern scanning to detect security weaknesses across your project directory.

Do I need Snyk and other dependencies installed to perform a code audit?▼

These dependencies support the structured methodology for reconnaissance and discovery, enabling the tool to accurately identify security weaknesses and map potential attack surfaces across your codebase.

What is the best way to identify and fix security weaknesses in my code?▼

By following a structured methodology of reconnaissance, discovery, analysis, and reporting, this approach maps trust boundaries and provides specific scripts to automate the detection of security flaws.

Related Skills

Explore More Software Engineering Skills→
orbtyapporbtyapp
1

using-git-worktrees

Create isolated Git worktrees for feature development with setup detection.

Official
Basic
DCx7C5DCx7C5

vulnerabilities-SKILL.md

Prioritize CVEs by CVSS scores enriched with EPSS and KEV data.

Community
Advanced
securityreviewaisecurityreviewai

repo-architecture-analysis

Analyze git repository structures to extract architectural patterns and data flows for threat modeling.

Official
Intermediate
Logos-LiberLogos-Liber
17

vulnerability-scanning

Identifies security vulnerabilities in code, dependencies, and container images.

Official
Advanced