scan-deep

Enrich initial-scan.json findings into a Pydantic-conformant deep-scan.json report.

Updated Mar 11, 2026
One-click install
npx skills add https://github.com/ricardoo022/PentestAI-with-claude-code --skill scan-deep
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: scan-deep
Source: https://github.com/ricardoo022/PentestAI-with-claude-code/tree/main/.claude/skills/scan-deep
Command: npx skills add https://github.com/ricardoo022/PentestAI-with-claude-code --skill scan-deep

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Deep security scanning often stops at initial findings; scan-deep enriches and validates an initial scan by performing in-depth testing across detected stack configurations, removing false positives, and producing a comprehensively enriched JSON output that conforms to the Pydantic ScanReport schema.

Core Features & Use Cases

  • Validate and extend an initial scan JSON by re-processing findings against the ScanReport schema.
  • Perform stack-aware discovery to reveal additional vulnerabilities and corroborate existing findings.
  • Prune false positives and prepare production-ready output for remediation workflows.

Quick Start

Invoke with /scan-deep {client_name} to generate an enriched, validated scan report from an existing initial-scan.json.

Frequently Asked Questions about scan-deep

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enrich an initial security scan with deeper vulnerability validation?▼

To enrich an initial security scan, you can process an existing initial-scan JSON file to validate findings, perform stack-aware discovery, remove false positives, and output a deep-scan JSON report conforming to the Pydantic ScanReport schema.

What is the best way to remove false positives from a web application security scan?▼

Removing false positives from a web application security scan is achieved by re-processing initial findings against a standardized schema and performing stack-aware probing to corroborate existing vulnerabilities before outputting a validated report.

Can I validate JSON scan reports against the Pydantic ScanReport schema?▼

Yes, you can validate JSON scan reports against the Pydantic ScanReport schema by loading the initial scan data, reconciling the findings, and producing a Pydantic-conformant JSON output for remediation workflows.

How do I perform stack-aware discovery to expand a web application assessment?▼

Performing stack-aware discovery to expand a web application assessment involves probing detected stack configurations to reveal additional vulnerabilities, corroborating initial findings, and enriching the final validated output.

Do I need an existing initial-scan.json to deepen my security scan?▼

Yes, you need an existing initial-scan.json because the deep scan process requires an initial scan to load, validate against the ScanReport schema, and enrich with stack-aware discovery and false positive removal.

Why does my security scan JSON report fail schema validation during enrichment?▼

Security scan JSON reports fail schema validation during enrichment when initial findings do not conform to the standardized ScanReport schema, requiring reconciliation and validation before producing a production-ready output.