skills.rest
KhaledMKhaled
KhaledMKhaledCOMMUNITY
Explore all skills by this author →
GitHub

security_scan

Run dependency audits, SAST scans, and dataflow checks to report critical and high security findings.

Updated Dec 10, 2025
Search Tags:#sast#security scanning#dependency audit#risk prioritization#vulnerability reporting#privacy dataflow#code quality security
One-click install
npx skills add https://github.com/KhaledMKhaled/FodaStore --skill security-scan-khaledmkhaled
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security_scan
Source: https://github.com/KhaledMKhaled/FodaStore/tree/main/.local/skills/security_scan
Command: npx skills add https://github.com/KhaledMKhaled/FodaStore --skill security-scan-khaledmkhaled

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It helps you quickly identify and prioritize real security weaknesses in your codebase by running dependency, static code, and privacy/security dataflow checks, then summarizing the most urgent findings first.

Core Features & Use Cases

  • Dependency risk audit: Finds vulnerable packages and missing or outdated components by running runDependencyAudit.
  • Static application security testing (SAST): Detects potential insecure patterns in your source via runSastScan.
  • Privacy and security dataflow review: Surfaces privacy/security issues in data movement paths using runHoundDogScan.
  • Use case: When preparing a release or responding to a security request, run this skill to produce a concise, prioritized summary of critical/high issues and actionable remediation guidance.

Quick Start

Use the security_scan skill to run a full security scan of the repository and return a prioritized summary of critical and high findings.

Frequently Asked Questions about security_scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security scan to prioritize critical vulnerabilities in my codebase?▼

A repository security scan works by executing dependency vulnerability checks, static application security testing, and dataflow analysis in parallel. It identifies insecure patterns and privacy risks, summarizing critical and high severity findings for fast remediation.

How does static application security testing identify insecure code patterns?▼

Static application security testing identifies insecure code patterns by analyzing your source code for potential vulnerabilities. This scanning mechanism surfaces security weaknesses directly within the codebase without executing the application.

Can I use this security scanning skill for pre-release code reviews and compliance checks?▼

Yes, you can use this security scanning skill for pre-release reviews, incident triage, and recurring compliance-oriented scans. It evaluates code and dependency changes to produce actionable remediation guidance for critical issues.

What is the best way to audit dependencies for vulnerable packages before a release?▼

The best way to audit dependencies is by running an automated vulnerability check that finds vulnerable packages and missing or outdated components. This dependency risk audit outputs a prioritized summary of urgent findings for your release preparation.

Does the privacy dataflow review track security issues in data movement paths?▼

Yes, the privacy dataflow review tracks security issues in data movement paths across your repository. It surfaces privacy vulnerabilities by analyzing how data flows through your application, identifying potential risks in the movement of sensitive information.

Related Skills

Explore More Software Engineering Skills→
pekralpekral

readme-generator

Generate README, CONTRIBUTING, and SECURITY files from repository source code.

Community
Intermediate
jeanlucianojeanluciano
20

Security Auditing

Audit security vulnerabilities in codebases, configurations, and APIs against OWASP Top 10.

Community
Advanced
NagyViktNagyVikt
2

triage-go-vulnerabilities

Analyze Go dependency vulnerabilities with govulncheck and map remediation strategies.

Community
Intermediate
offers-pngoffers-png

security_scan

Run dependency, SAST, and HoundDog scans in parallel and report vulnerabilities.

Community
Advanced