Can this skill automatically fix the vulnerabilities it finds?

While it doesn't apply fixes without oversight, it provides detailed remediation guidance and 'Good vs Bad' code examples to help you implement the correct fix.

What security tools does the scanner utilize?

The skill leverages industry-standard tools like Bandit for Python, ESLint Security for JavaScript/TypeScript, and govulncheck for Go environments.

Which programming languages does the Vulnerability Scanner support?

It provides specialized scanning for JavaScript, TypeScript, Python, and Go, along with general pattern matching for other languages.

Does it check for OWASP Top 10 issues?

Yes, it is specifically designed to scan for the most common web vulnerabilities including SQL injection, XSS, and insecure deserialization.

Vulnerability Scanner

Name: Vulnerability Scanner
Author: armanzeroeight

byarmanzeroeight

•

Security & Testing

Scans codebases for security vulnerabilities, identifies CVE patterns, and provides severity-based remediation guidance.

About

The Vulnerability Scanner skill empowers Claude to perform automated security audits across multiple programming languages including JavaScript, Python, and Go. It identifies common security flaws such as SQL injection, Cross-Site Scripting (XSS), and command injection by integrating industry-standard static analysis tools and custom pattern matching. By categorizing findings into severity levels and providing actionable fix strategies, it helps developers secure their applications during the development lifecycle and align with OWASP Top 10 standards.

Key Features

Multi-language static analysis for JS, TypeScript, Python, and Go
Detailed remediation guidance with specific code fix examples
Integration with tools like Bandit, ESLint Security, and Govulncheck
Detection of OWASP Top 10 vulnerabilities and common CVE patterns
Automated severity categorization from Low to Critical
19 GitHub stars

Use Cases

Performing a pre-commit security audit on a new or existing codebase
Identifying and fixing XSS or SQL injection vulnerabilities in web applications
Scanning project dependencies and source code for known security patterns

About

Key Features

Multi-language static analysis for JS, TypeScript, Python, and Go
Detailed remediation guidance with specific code fix examples
Integration with tools like Bandit, ESLint Security, and Govulncheck
Detection of OWASP Top 10 vulnerabilities and common CVE patterns
Automated severity categorization from Low to Critical
19 GitHub stars

Use Cases

Performing a pre-commit security audit on a new or existing codebase
Identifying and fixing XSS or SQL injection vulnerabilities in web applications
Scanning project dependencies and source code for known security patterns