Conducts comprehensive OWASP-style security audits to identify and remediate vulnerabilities within your codebase.
The Security Scan skill empowers developers to proactively secure their applications by performing automated, multi-language vulnerability assessments based on OWASP guidelines. By scanning for critical issues like hardcoded secrets, SQL injection, and cross-site scripting (XSS), it provides a prioritized findings report with actionable remediation steps. It leverages parallel processing for efficiency and integrates with local security rules to ensure a thorough, context-aware analysis of your project's security posture without modifying your source code.
主な機能
01Dependency analysis for insecure or unpinned package versions
02Parallelized Grep scanning for hardcoded secrets, SQLi, and XSS
03Customizable rules via local security.md configuration files
04Detailed reporting with severity levels and actionable code snippets
05Automated OWASP-style vulnerability detection across multiple languages
060 GitHub stars
ユースケース
01Automating routine security checks during the development lifecycle
02Auditing legacy repositories or third-party code for hidden risks
03Pre-release security audits to catch vulnerabilities before deployment
