skills.rest
thgterto
thgtertoCOMMUNITY
Explore all skills by this author →
GitHub

vulnerability-scanner

Scan software projects for dependencies, secrets, code patterns, and configuration risks.

Updated Jan 3, 2026
Search Tags:#security#vulnerability#dependencies#secrets#scan#code-patterns
One-click install
npx skills add https://github.com/thgterto/Gerenciador-de-estoque --skill vulnerability-scanner-thgterto
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/thgterto/Gerenciador-de-estoque/tree/main/.agent/skills/vulnerability-scanner
Command: npx skills add https://github.com/thgterto/Gerenciador-de-estoque --skill vulnerability-scanner-thgterto

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This tool helps teams identify and prioritize security vulnerabilities in software projects by analyzing dependencies, secrets, code patterns, and configuration.

Core Features & Use Cases

  • Dependency risk detection through auditing common package managers and lock files.
  • Secrets scanning to detect hard-coded credentials, tokens, and cloud keys.
  • Code pattern analysis for dangerous patterns that could lead to injections or data exposure.
  • Configuration checks to surface insecure settings and misconfigurations.
  • Output a structured report for remediation planning and compliance.

Quick Start

Run the vulnerability-scanner on a project directory to generate a comprehensive security assessment covering dependencies, secrets, patterns, and configuration.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan code for security vulnerabilities and hard-coded secrets?▼

Yes, targeted security checks can isolate specific risk areas by running modular scans for dependencies, secrets, code patterns, or configuration separately instead of executing a full project scan.

Does vulnerability scanning work with JavaScript and Python ecosystems?▼

The scan outputs a structured JSON report containing per-scan findings, severity counts, and an overall status to assist with remediation planning and compliance tracking.

What is the best way to detect insecure configuration and dangerous code patterns?▼

You can run targeted checks for specific categories like dependencies, secrets, code patterns, or configuration, or execute a full scan to generate a comprehensive security assessment covering all areas.

Can I check for hard-coded credentials and cloud keys in my project?▼

The scan outputs a structured JSON report containing per-scan findings, severity counts, and an overall status to assist with remediation planning and compliance tracking.

How do I audit dependencies for supply chain vulnerabilities?▼

Dependency risk detection works by auditing common package managers and lock files across JavaScript, Python, and other ecosystems to identify and prioritize supply chain vulnerabilities.

What format does the security scan report use for remediation planning?▼

The scan outputs a structured JSON report containing per-scan findings, severity counts, and an overall status to assist with remediation planning and compliance tracking.

Related Skills

Explore More Software Engineering Skills→
DatTran26DatTran26

ck:security-scan

Scan codebases for security vulnerabilities, secrets, and dependency risks.

Community
Advanced
ArabelaTsoArabelaTso
142

static-vulnerability-detector

Detects security vulnerabilities in code and categorizes them by CWE ID and severity.

Community
Advanced
sadie100sadie100

cso

Audit infrastructure, applications, and development processes for security vulnerabilities.

Community
Advanced
mohitmishra786mohitmishra786

security

Scan code, dependencies, containers, and cloud configurations for security vulnerabilities.

Community
Advanced