vulnerability-scanner

Analyze project vulnerabilities using OWASP 2025 principles and CVSS/EPSS scoring.

2|Updated Jan 29, 2026
One-click install
npx skills add https://github.com/Tai-ch0802/skills-bundle --skill vulnerability-scanner-tai-ch0802
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/Tai-ch0802/skills-bundle/tree/main/i18n/zh-TW/vulnerability-scanner
Command: npx skills add https://github.com/Tai-ch0802/skills-bundle --skill vulnerability-scanner-tai-ch0802

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps identify and prioritize security vulnerabilities in a project by applying advanced principles of threat modeling, supply chain security, and attack surface mapping, ensuring a robust defense against modern threats.

Core Features & Use Cases

  • OWASP 2025 Compliance: Integrates the latest OWASP Top 10 risks for comprehensive vulnerability assessment.
  • Supply Chain Security: Analyzes dependencies and build pipelines for risks (A03).
  • Attack Surface Mapping: Identifies entry points and data flows to pinpoint potential weaknesses.
  • Risk Prioritization: Uses CVSS, EPSS, and asset value to focus on the most critical threats.
  • Use Case: Before deploying a new microservice, run this Skill to identify potential injection flaws, insecure configurations, and supply chain risks in its dependencies, ensuring a secure release.

Quick Start

Use the vulnerability-scanner skill to perform a full security scan on the project located at '/app/project-x'.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform an OWASP 2025 vulnerability assessment on a new microservice?

Supply chain security analysis evaluates your project dependencies and build pipelines to identify risks mapped to OWASP A03, pinpointing potential weaknesses introduced by external libraries and components.

What is the best way to prioritize identified security vulnerabilities using risk assessment?

Vulnerability risk prioritization uses CVSS and EPSS scores alongside asset value to rank identified threats, ensuring you focus remediation efforts on the most critical security flaws first.

Can I map the attack surface of my application to find insecure configurations?

You can map your application attack surface by identifying entry points and data flows, which effectively highlights potential weaknesses including insecure configurations and access control errors.

Do I need Python to run threat modeling and automated vulnerability validation?

Python is required for automated validation because the vulnerability analysis relies on Python scripts to execute checks against your codebase and validate identified security risks.

When should I use an advanced vulnerability scanner instead of manual code review?

Use an advanced vulnerability scanner before deploying new microservices or when you need to systematically identify injection flaws and configuration errors across large attack surfaces where manual review is insufficient.