sc-orchestrator

Orchestrate four-phase security scans with error handling and progress updates.

7|Updated Apr 9, 2026
One-click install
npx skills add https://github.com/fatihkan/badi --skill sc-orchestrator-fatihkan
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: sc-orchestrator
Source: https://github.com/fatihkan/badi/tree/main/.claude/skills/security-check/sc-orchestrator
Command: npx skills add https://github.com/fatihkan/badi --skill sc-orchestrator-fatihkan

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

The orchestrator coordinates the entire 4-phase security scanning pipeline, managing execution, dispatching sub-skills, tracking progress, and aggregating results to ensure a complete run even in the presence of errors.

Core Features & Use Cases

  • Orchestrates Phase 0 Pre-Check and all subsequent phases: Reconnaissance, Dependency Audit, Vulnerability Hunting, Verification, and Reporting.
  • Dispatches and coordinates specialized skills (e.g., sc-recon, sc-dependency-audit, sc-sqli, sc-xss, sc-verifier, sc-report) while handling failures gracefully.
  • Generates and stores intermediate and final reports under security-report/, enabling incremental scans and audit trails.
  • Provides real-time progress updates and supports diff/incremental mode for scanning only changed files.

Quick Start

Trigger a full security scan by issuing the command 'run security check'.

Frequently Asked Questions about sc-orchestrator

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate a full vulnerability scanning workflow across multiple phases?▼

Automate vulnerability scanning workflows by orchestrating a 4-phase pipeline covering Reconnaissance, Dependency Audit, Vulnerability Hunting, Verification, and Reporting. It dispatches specialized sub-skills, tracks execution, and aggregates results.

What is the best way to coordinate multiple security scanning tools without losing data on failures?▼

Coordinate security scanning tools with an orchestration layer that handles failures gracefully. It manages pre-checks, dispatches sub-skills, tracks progress, and aggregates phase results to ensure a complete run even when individual scans encounter errors.

Can I run incremental security scans on only the changed files in my repository?▼

Run incremental security scans using the built-in diff mode. This mode targets only changed files, generating and storing intermediate and final reports under the security-report directory to enable incremental scans and maintain audit trails.

How does a security scan orchestrator handle progress tracking and reporting?▼

A security scan orchestrator handles progress tracking by providing real-time status updates during execution. It aggregates outputs from all phases, storing intermediate and final reports under a designated security-report directory for audit trails.

Do I need specific sub-skills to execute a complete security scanning pipeline?▼

Executing a complete security scanning pipeline requires dispatching specialized sub-skills for each phase, such as sc-recon, sc-dependency-audit, sc-sqli, sc-xss, sc-verifier, and sc-report. The orchestrator coordinates these components to deliver aggregated results.

What are the limitations of orchestrating security scans across specialized sub-skills?▼

Orchestrating security scans depends on the availability and compatibility of dispatched sub-skills. While it handles failures gracefully to ensure a complete run, the overall scan depth is constrained by the specific vulnerability hunting capabilities of the individual specialized skills.