Can this skill automatically fix the vulnerabilities it finds?

While it doesn't apply fixes without oversight, it provides detailed remediation guidance and 'Good vs Bad' code examples to help you implement the correct fix.

What security tools does the scanner utilize?

The skill leverages industry-standard tools like Bandit for Python, ESLint Security for JavaScript/TypeScript, and govulncheck for Go environments.

Which programming languages does the Vulnerability Scanner support?

It provides specialized scanning for JavaScript, TypeScript, Python, and Go, along with general pattern matching for other languages.

Does it check for OWASP Top 10 issues?

Yes, it is specifically designed to scan for the most common web vulnerabilities including SQL injection, XSS, and insecure deserialization.

Vulnerability Scanner

Name: Vulnerability Scanner
Author: armanzeroeight

byarmanzeroeight

•

セキュリティとテスト

Scans codebases for security vulnerabilities, identifies CVE patterns, and provides severity-based remediation guidance.

The Vulnerability Scanner skill empowers Claude to perform automated security audits across multiple programming languages including JavaScript, Python, and Go. It identifies common security flaws such as SQL injection, Cross-Site Scripting (XSS), and command injection by integrating industry-standard static analysis tools and custom pattern matching. By categorizing findings into severity levels and providing actionable fix strategies, it helps developers secure their applications during the development lifecycle and align with OWASP Top 10 standards.

主な機能

01Multi-language static analysis for JS, TypeScript, Python, and Go

02Detailed remediation guidance with specific code fix examples

03Integration with tools like Bandit, ESLint Security, and Govulncheck

04Detection of OWASP Top 10 vulnerabilities and common CVE patterns

05Automated severity categorization from Low to Critical

0619 GitHub stars

ユースケース

01Performing a pre-commit security audit on a new or existing codebase

02Identifying and fixing XSS or SQL injection vulnerabilities in web applications

03Scanning project dependencies and source code for known security patterns

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add armanzeroeight/fastagent-plugins vulnerability-scanner

For use in Claude.ai and ChatGPT

Download Skill