What kind of vulnerabilities can it find?

It detects a wide range of issues including SQL injection, cross-site scripting (XSS), insecure configurations, and outdated dependencies.

When should I use this skill?

It is best used during development, before committing code, and as a final check before deploying to production environments.

How do I trigger a security scan?

You can trigger a scan by using phrases like 'scan for vulnerabilities' or shortcut commands such as /scan and /vuln.

Does it support third-party libraries?

Yes, the skill scans dependency manifests to identify known vulnerabilities (CVEs) in external libraries and packages.

Is remediation guidance provided?

Yes, the skill generates a detailed report that includes severity levels and specific recommendations to resolve identified risks.

Security Vulnerability Scanner

Name: Security Vulnerability Scanner
Author: jeremylongshore

byjeremylongshore

•

883

安全与测试

Automates comprehensive security audits by scanning source code, dependencies, and configurations for CVEs and potential exploits.

关于

The Security Vulnerability Scanner skill equips Claude with the ability to proactively identify security risks across your entire project lifecycle. By performing deep static analysis and checking dependencies against known CVE databases, it uncovers hidden flaws like SQL injection risks or outdated packages. This skill is essential for developers aiming to maintain high security standards, providing actionable remediation reports that help prioritize critical fixes and ensure a secure production environment.

主要功能

Static application security testing (SAST) for code-level flaws
Detailed reporting with severity levels and remediation steps
Real-time CVE detection across project dependencies
Security configuration analysis to prevent misconfigurations
883 GitHub stars
Support for automated scans via /scan and /vuln commands

使用场景

Identifying and fixing SQL injection or XSS risks in source code
Auditing package manifests for known vulnerabilities in third-party libraries
Pre-deployment security checks to ensure infrastructure safety

关于

主要功能

Static application security testing (SAST) for code-level flaws
Detailed reporting with severity levels and remediation steps
Real-time CVE detection across project dependencies
Security configuration analysis to prevent misconfigurations
883 GitHub stars
Support for automated scans via /scan and /vuln commands

使用场景

Identifying and fixing SQL injection or XSS risks in source code
Auditing package manifests for known vulnerabilities in third-party libraries
Pre-deployment security checks to ensure infrastructure safety