railguard-unified-scan

Coordinate 12 subagents for multi-phase vulnerability analysis with SQLite tracking.

76|9|Updated Feb 27, 2026
One-click install
npx skills add https://github.com/Netflix-Skunkworks/railguard-skill --skill railguard-unified-scan
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: railguard-unified-scan
Source: https://github.com/Netflix-Skunkworks/railguard-skill/tree/main/.claude/skills/railguard-unified-scan
Command: npx skills add https://github.com/Netflix-Skunkworks/railguard-skill --skill railguard-unified-scan

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires rg, python3, semgrep, and includes scripts (resource) and references (resource) components.

What problem does it solve?

Railguard Unified Security Scanner orchestrates a multi-phase security analysis, combining file-handoff data transport with SQLite-backed progress tracking to enable resilience in large-scale repo scans.

Core Features & Use Cases

  • Orchestrated multi-phase vulnerability analysis using 12 specialized subagents
  • Lean findings transport via /tmp handoff and batch-based FP validation
  • SQLite-based lifecycle tracking with crash recovery and multi-scan history
  • Cross-language support for common stacks to identify vulnerabilities across repos
  • Clear traceability and reproducibility for security reviews

Quick Start

Run a tracked, resilient security scan over a repository using railguard-unified-scan.

Frequently Asked Questions about railguard-unified-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a resilient multi-phase vulnerability scan for a large repository?▼

A resilient vulnerability scan coordinates 12 specialized subagents to perform multi-phase analysis, sharing findings via /tmp stubs and tracking progress in SQLite for crash recovery during large repo scans.

Does this security scanner support analyzing code across multiple languages?▼

Yes, the security scanner supports Python, JavaScript, TypeScript, Java, Go, Ruby, and PHP, allowing you to identify vulnerabilities across common tech stacks within a single repository.

What do I need to install to perform orchestrated vulnerability analysis with SQLite tracking?▼

To perform orchestrated vulnerability analysis, you need ripgrep (rg) and Python 3 installed, which enable multi-phase scanning, batch processing, and SQLite-based lifecycle tracking.

How does batch processing work for false positive validation in vulnerability scanning?▼

Batch processing normalizes results from subagents and validates false positives using lean findings transported via /tmp handoff stubs, ensuring efficient data handling during multi-phase security reviews.

What is the best way to track scan history and recover from crashes during security analysis?▼

The best way to track scan history is using SQLite-backed lifecycle tracking, which provides multi-scan history and crash recovery to maintain resilience across large-scale vulnerability analyses.

Why does my multi-phase security scan require ripgrep and Python 3?▼

Ripgrep and Python 3 are required because they drive the file-handoff data transport and orchestrate the 12 specialized subagents needed to perform cross-language vulnerability analysis and batch normalization.