skills.rest
thimmarques
thimmarquesCOMMUNITY
Explore all skills by this author →
GitHub

vulnerability-scanner

Scan codebases and supply chains for vulnerabilities and generate JSON reports.

Updated Aug 27, 2026
Search Tags:#security#vulnerability#owasp#dependencies#secrets#scanning#code-patterns
One-click install
npx skills add https://github.com/thimmarques/gestao-inteligente --skill vulnerability-scanner-thimmarques
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/thimmarques/gestao-inteligente/tree/main/.agent/skills/vulnerability-scanner
Command: npx skills add https://github.com/thimmarques/gestao-inteligente --skill vulnerability-scanner-thimmarques

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Helps security teams and developers identify and prioritize vulnerabilities across code, dependencies, and configurations, reducing risk from insecure code, broken supply chains, and misconfigurations.

Core Features & Use Cases

  • Automated vulnerability discovery across dependencies, code patterns, and configuration.
  • Threat-oriented mindset inspired by OWASP principles to guide risk prioritization.
  • Use Case: scan a Node.js or Python project to generate a structured report of critical and high-severity issues for remediation.

Quick Start

Run the vulnerability-scanner against your project to generate a structured security findings report.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for security vulnerabilities and exposed secrets?▼

To scan for security vulnerabilities and exposed secrets, run a modular Python-based scanner against your project directory. It identifies dangerous code patterns, misconfigurations, and cloud credentials, outputting a detailed JSON report with severity levels for quick risk assessment.

What is dependency scanning and how does it prioritize OWASP security risks?▼

Dependency scanning identifies vulnerabilities in your project's supply chain by analyzing external libraries. It applies a threat-oriented mindset inspired by OWASP principles to prioritize critical and high-severity issues, generating a structured report for immediate remediation.

Can I scan a Node.js or Python project for misconfigurations and cloud credentials?▼

Yes, you can scan Node.js and Python projects for misconfigurations and cloud credentials. The scanner operates across multiple languages and platforms, including web applications and CLI tools, to detect insecure configurations and exposed secrets.

Does the vulnerability scanner work in CI pipelines across different languages like Go?▼

Yes, the vulnerability scanner is applicable in CI pipelines and supports multiple languages including Go, Node.js, and Python. It automates vulnerability discovery across dependencies and code patterns, providing concise summaries for quick risk assessment.

What is the best way to generate a structured security findings report for remediation?▼

The best way to generate a structured security findings report is to run an automated vulnerability scan. The tool outputs a detailed JSON report containing severity levels and a concise summary, enabling security teams to quickly assess and prioritize remediation efforts.

Related Skills

Explore More Software Engineering Skills→
cmaennercmaenner
5

sca-audit

Scan project dependencies for known CVEs across multiple ecosystems.

Community
Intermediate
matteocervellimatteocervelli
25

planning-doc-generator

Generate project assessment Markdown reports from structured JSON data.

Community
Intermediate
thisisqubikathisisqubika

security-review

Analyze code repositories for vulnerabilities using SAST and AI triage.

Official
Advanced
DariusCorvusDariusCorvus
37

cso

Audit infrastructure, dependencies, CI/CD, and LLM security with trend tracking.

Community
Advanced