Does it provide solutions for the issues it finds?

Yes, the generated report includes detailed findings, severity levels, and specific remediation guidance to help you fix identified risks.

What types of vulnerabilities can it detect?

The skill identifies code-level flaws like SQL injection, vulnerable third-party dependencies (CVEs), and insecure project configurations.

Can I use it for dependency management?

Absolutely. It scans files like package.json to identify npm packages with known vulnerabilities and recommends necessary updates.

How do I start a security scan?

You can initiate a scan by using trigger phrases like '/scan', '/vuln', or by asking Claude to 'scan for vulnerabilities' in your project.

When is the best time to use this skill?

It is recommended to run scans regularly during development and as a final check before deploying your code to production.

Vulnerability Scanner

Name: Vulnerability Scanner
Author: jeremylongshore

byjeremylongshore

•

883

安全与测试

Scans your project for security vulnerabilities, known CVEs, and insecure configurations using automated static analysis and dependency checking.

关于

This skill integrates automated security auditing into your Claude Code workflow, allowing you to proactively identify risks in code logic, third-party dependencies, and project configurations. By leveraging the vulnerability-scanner plugin, it generates detailed reports with severity rankings and remediation guidance, helping developers maintain a robust security posture and prevent vulnerabilities like SQL injection or outdated library exploits from reaching production.

主要功能

883 GitHub stars
Automated static code analysis for security flaws
Detailed vulnerability reports with categorized severity levels
Configuration analysis to identify insecure environment settings
Dependency scanning for known CVEs across package managers
Actionable remediation guidance for identified security issues

使用场景

Checking package managers for vulnerable third-party libraries before deployment
Scanning a repository for SQL injection and cross-site scripting (XSS) risks
Reviewing project configurations for security weaknesses and best practices

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jeremylongshore/claude-code-plugins-plus-skills vulnerability-scanner

For use in Claude.ai and ChatGPT

Download Skill

GitHub

关于