How do I trigger a security scan in Claude Code?

You can initiate a scan by using trigger phrases like 'scan for vulnerabilities', 'find security issues', or slash commands such as '/scan' and '/vuln'.

What types of vulnerabilities can this skill detect?

It identifies common software flaws like SQL injection, insecure configurations, and high-severity CVEs across your code and ecosystem.

Can Claude fix the vulnerabilities found by the scanner?

The skill provides detailed remediation guidance for every finding. You can then direct Claude to apply those specific security fixes using its code editing capabilities.

Does the skill check third-party libraries for security issues?

Yes, the skill analyzes dependency files like package.json to identify known vulnerabilities (CVEs) within your project's external packages.

Is this tool suitable for a CI/CD pipeline?

While designed for interactive use within Claude Code, its automated reporting makes it an excellent companion for maintaining continuous security during the development phase.

Vulnerability Scanner

Name: Vulnerability Scanner
Author: jeremylongshore

byjeremylongshore

•

883

セキュリティとテスト

Automates security audits by scanning source code, dependencies, and configurations for CVEs and potential exploits.

概要

The Vulnerability Scanner skill empowers Claude to perform deep security analysis across your entire project. By leveraging static analysis and dependency checking, it identifies critical risks such as SQL injection vulnerabilities, outdated packages with known CVEs, and insecure environment configurations. This skill is essential for developers who want to integrate security-first practices into their daily workflow, providing actionable remediation guidance and comprehensive reports to ensure codebases remain resilient against modern threats.

主な機能

Detailed vulnerability reporting with severity level categorization
883 GitHub stars
Static code analysis for common security flaws like SQL injection
Actionable remediation guidance for identified security risks
Automated dependency auditing for known CVEs in package managers
Security configuration analysis to detect insecure settings

ユースケース

Scanning source code for injection vulnerabilities before merging a pull request
Verifying project infrastructure and configurations for security best practices
Auditing project dependencies for critical security patches and updates

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jeremylongshore/claude-code-plugins-plus-skills vulnerability-scanner

For use in Claude.ai and ChatGPT

Download Skill

GitHub

概要