Does this skill check for third-party library vulnerabilities?

Yes, it performs dependency checking to identify known CVEs in third-party packages by analyzing manifest files like package.json or requirements.txt.

How do I trigger a vulnerability scan in Claude Code?

You can initiate a scan by using trigger phrases such as '/scan', '/vuln', or by asking Claude to 'find security issues' or 'check for vulnerabilities'.

Does it provide instructions on how to fix security issues?

Yes, the plugin generates a report that includes specific remediation guidance for each identified vulnerability to help you secure your project.

What types of vulnerabilities can this skill detect?

It detects code-level flaws like SQL injection and XSS, vulnerable dependencies, and insecure project or environment configurations.

Vulnerability Scanner

Name: Vulnerability Scanner
Author: jeremylongshore

byjeremylongshore

•

884

Security & Testing

Identifies security vulnerabilities, known CVEs, and insecure configurations within your codebase and project dependencies.

About

The Vulnerability Scanner skill integrates comprehensive security auditing directly into your Claude Code workflow. By leveraging static analysis and dependency checking, it identifies potential risks such as SQL injection, Cross-Site Scripting (XSS), and outdated libraries with known vulnerabilities. This skill provides detailed reports including severity levels and remediation guidance, making it an essential tool for developers and security engineers looking to maintain a secure posture throughout the development lifecycle.

Key Features

Real-time dependency scanning against CVE databases
Configuration audit for infrastructure and project settings
Automated static analysis for code-level security flaws
Detailed vulnerability reporting with severity classifications
Actionable remediation guidance for identified risks
884 GitHub stars

Use Cases

Scanning code for injection risks and security flaws before production deployment
Auditing project dependencies for known security vulnerabilities and CVEs
Reviewing cloud and local configurations for security best practices

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jeremylongshore/claude-code-plugins-plus-skills vulnerability-scanner

For use in Claude.ai and ChatGPT

Download Skill

GitHub