Is it possible to export scan results for external tools?

Yes, the skill can generate reports in HTML for human review, JSON for data processing, and SARIF for integration with platforms like GitHub Security.

Does it provide remediation advice for found vulnerabilities?

Yes, the skill includes specialized remediation templates to guide you through fixing common security issues and safely upgrading vulnerable dependencies.

Can this skill find leaked API keys and AWS tokens?

Yes, it uses over 100 regex patterns to identify exposed secrets, tokens, and private keys in your codebase and git history.

Which programming languages does this skill support for scanning?

It supports major ecosystems including JavaScript, TypeScript, Python, Go, Rust, and Java by checking their respective package managers and source code patterns.

Can I use this for web application security validation?

Absolutely. It includes specific tools for validating HTTP security headers and checking for OWASP Top 10 vulnerabilities like XSS, SQL injection, and SSRF.

Security Scanning & Audit Patterns

Name: Security Scanning & Audit Patterns
Author: vanman2024

byvanman2024

Security & Testing

Automates comprehensive security vulnerability scanning, secret detection, and OWASP compliance auditing for multi-language codebases.

About

This skill equips Claude with specialized patterns and scripts to perform deep security audits across various development environments. It enables automated detection of exposed secrets, identification of vulnerable dependencies across multiple package managers (npm, pip, cargo, etc.), and scanning for OWASP Top 10 risks. By providing actionable remediation guidance and professional reporting tools in formats like HTML and SARIF, it helps developers secure their infrastructure, validate HTTP headers, and maintain a robust security posture throughout the software development lifecycle.

Key Features

OWASP Top 10 pattern identification including injection and access control flaws
Automated security report generation in HTML, JSON, and SARIF formats
Comprehensive secret and credential detection across 100+ sensitive patterns
Multi-language dependency vulnerability auditing for npm, pip, cargo, and Maven
0 GitHub stars
HTTP security header validation with specific configuration recommendations

Use Cases

Integrating automated security scanning into CI/CD pipelines for continuous monitoring
Performing pre-release security audits to identify vulnerabilities and hardcoded secrets
Validating web application security headers and OWASP compliance during development

About

Key Features

OWASP Top 10 pattern identification including injection and access control flaws
Automated security report generation in HTML, JSON, and SARIF formats
Comprehensive secret and credential detection across 100+ sensitive patterns
Multi-language dependency vulnerability auditing for npm, pip, cargo, and Maven
0 GitHub stars
HTTP security header validation with specific configuration recommendations

Use Cases

Integrating automated security scanning into CI/CD pipelines for continuous monitoring
Performing pre-release security audits to identify vulnerabilities and hardcoded secrets
Validating web application security headers and OWASP compliance during development