vulnerability-scanner

Scan project dependencies, code, secrets, and configurations for security vulnerabilities.

Updated Jan 31, 2026
One-click install
npx skills add https://github.com/tuyenht/Antigravity-Core --skill vulnerability-scanner-tuyenht
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/tuyenht/Antigravity-Core/tree/main/.agent/skills/vulnerability-scanner
Command: npx skills add https://github.com/tuyenht/Antigravity-Core --skill vulnerability-scanner-tuyenht

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the critical need to identify and remediate security vulnerabilities within a project, ensuring compliance with industry standards like OWASP and protecting against common attack vectors.

Core Features & Use Cases

  • Comprehensive Scanning: Analyzes dependencies, code patterns, secrets, and configurations for security flaws.
  • OWASP Compliance: Focuses on current OWASP Top 10 risks, including supply chain security and insecure design.
  • Prioritized Remediation: Provides actionable insights and severity ratings to guide fixing the most critical issues first.
  • Use Case: Before deploying a new web application, run this Skill to proactively discover and fix potential SQL injection flaws, exposed API keys, and vulnerable dependencies, preventing costly breaches.

Quick Start

Run a full security scan on the current project directory.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my project for security vulnerabilities and hardcoded secrets?

To scan for security vulnerabilities, run a full analysis on your project directory to detect hardcoded secrets, risky code patterns, and dependency flaws, prioritizing remediation based on CVSS scores and exploitability.

Does this vulnerability scanner check for OWASP Top 10 compliance?

Yes, this vulnerability scanner checks for OWASP Top 10 compliance by identifying current risks like injection flaws, supply chain vulnerabilities, and insecure design, ensuring your project adheres to industry security standards.

What is the best way to find vulnerable dependencies before deploying a web application?

The best way to find vulnerable dependencies is performing comprehensive security scanning across your project files, which analyzes supply chain risks and prioritizes findings based on exploitability to prevent costly breaches.

How are security vulnerabilities prioritized during code analysis?

Security vulnerabilities are prioritized during code analysis by evaluating their CVSS severity ratings and actual exploitability, providing actionable insights that guide you to fix the most critical injection flaws and exposed keys first.

Can I detect exposed API keys and configuration flaws using automated code analysis?

Yes, you can detect exposed API keys and configuration flaws using automated code analysis, which scans project dependencies, code patterns, and configurations to proactively identify and remediate security risks.