Can it identify specific code flaws like SQL injection?

Yes, the plugin performs static analysis on your source code to identify common security risks such as SQL injection, insecure data handling, and hardcoded secrets.

Does it check for CVEs in third-party dependencies?

Yes, the skill analyzes project dependency files (like package.json) to identify third-party libraries that contain known Common Vulnerabilities and Exposures (CVEs).

How do I start a security scan with Claude?

You can trigger a scan by asking Claude to 'scan for vulnerabilities', 'check for CVEs', or by using short commands like /scan or /vuln.

Does it provide solutions for the vulnerabilities it finds?

Yes, the generated report includes detailed findings along with severity levels and specific remediation guidance to help you fix the issues.

Vulnerability Scanner

Name: Vulnerability Scanner
Author: intent-solutions-io

byintent-solutions-io

安全与测试

Performs automated security audits to detect code flaws, vulnerable dependencies, and insecure configurations within your project.

关于

The Vulnerability Scanner skill empowers Claude to proactively secure your codebase by identifying potential risks before they reach production. By integrating static analysis, dependency checking, and configuration review, it provides a comprehensive security overview including CVE detection and remediation guidance. It is an essential tool for developers who want to maintain high security standards, automate audits, and ensure their third-party packages are free from known exploits.

主要功能

Automated static analysis for code-level security flaws
Configuration analysis to identify insecure project settings
0 GitHub stars
Real-time dependency scanning for known CVEs
Actionable remediation steps for identified vulnerabilities
Detailed security reporting with severity-based prioritization

使用场景

Performing a final security audit before deploying code to production
Checking package files for outdated, vulnerable libraries with known CVEs
Scanning a project for SQL injection or Cross-Site Scripting (XSS) risks

关于

主要功能

Automated static analysis for code-level security flaws
Configuration analysis to identify insecure project settings
0 GitHub stars
Real-time dependency scanning for known CVEs
Actionable remediation steps for identified vulnerabilities
Detailed security reporting with severity-based prioritization

使用场景

Performing a final security audit before deploying code to production
Checking package files for outdated, vulnerable libraries with known CVEs
Scanning a project for SQL injection or Cross-Site Scripting (XSS) risks