About
The pop-security-scan skill empowers developers to maintain secure codebases by automating dependency audits and vulnerability tracking. It integrates directly with npm audit to detect vulnerabilities across varying severity levels and cross-references findings with existing GitHub issues to prevent duplicates. With support for multiple remediation paths—including safe fixes, forced updates, and automated PR generation—this skill helps teams proactively manage security debt. It is designed for both on-demand usage and integration into routine maintenance workflows, providing clear reporting and health scoring to keep projects secure.
