skills.rest
yunaamelia
yunaameliaCOMMUNITY
Explore all skills by this author →
GitHub

vulnerability-scanner

Scan codebases for security vulnerabilities and prioritize risks using OWASP guidelines.

Updated Jan 20, 2026
Search Tags:#security#vulnerability#owasp#supply chain#secrets detection#code scanning
One-click install
npx skills add https://github.com/yunaamelia/mcp-agent-memory-pro --skill vulnerability-scanner-yunaamelia
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/yunaamelia/mcp-agent-memory-pro/tree/main/.agent/skills/vulnerability-scanner
Command: npx skills add https://github.com/yunaamelia/mcp-agent-memory-pro --skill vulnerability-scanner-yunaamelia

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps identify and prioritize security vulnerabilities in codebases, ensuring adherence to modern security best practices and mitigating risks from supply chain attacks.

Core Features & Use Cases

  • Comprehensive Scanning: Analyzes dependencies, hardcoded secrets, dangerous code patterns, and configuration settings.
  • Risk Prioritization: Uses CVSS, EPSS, and asset value to rank vulnerabilities.
  • Use Case: Before deploying a new feature, run this Skill to automatically scan the codebase for common vulnerabilities like SQL injection, exposed API keys, and insecure dependencies, providing a prioritized list of issues to fix.

Quick Start

Use the vulnerability-scanner skill to perform a full security scan on the current project directory.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for security vulnerabilities and hardcoded secrets?▼

You can scan for security vulnerabilities and hardcoded secrets by running an automated analysis on your project directory. The scanner checks dependencies, code patterns, and configurations to identify risks like exposed API keys and SQL injection.

What is the best way to prioritize code vulnerabilities during a security audit?▼

Prioritizing code vulnerabilities is best done by using CVSS, EPSS, and asset value metrics. This approach ranks identified security risks, helping you focus on fixing the most critical injection and supply chain threats first.

Does automated security scanning work with Python and JavaScript code?▼

Automated security scanning does work with Python, JavaScript, and other common languages. It analyzes your codebase according to OWASP guidelines to detect injection flaws, insecure dependencies, and misconfiguration vulnerabilities.

How are OWASP guidelines applied to detect supply chain risks in dependencies?▼

OWASP guidelines are applied to detect supply chain risks by analyzing your project dependencies for known vulnerabilities. This automated code scanning process identifies insecure packages and prioritizes them based on risk severity.

Can I detect exposed API keys and misconfiguration vulnerabilities before deployment?▼

You can detect exposed API keys and misconfiguration vulnerabilities before deployment by running a full security scan. It analyzes configuration settings and hardcoded secrets to ensure adherence to modern security best practices.

Related Skills

Explore More Software Engineering Skills→
JosiahSiegelJosiahSiegel
51

defender-for-devops

Integrate Microsoft Defender for DevOps into Azure Pipelines for automated security scanning.

Community
Advanced
GaryOcean428GaryOcean428

security-audit

Detect secrets, insecure dependencies, and vulnerable patterns in codebases.

Community
Advanced
PriyanshKuniyalPriyanshKuniyal

sast-configuration

Configures and manages SAST tools for automated vulnerability detection in CI/CD pipelines.

Community
Advanced
zhangzhang-111-izhangzhang-111-i
2

skill-security-auditor

Scan AI agent skills for security vulnerabilities before installation.

Community
Advanced