security_scan

Run three security scanners and compile a prioritized vulnerability report.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/l8yh1/sainxbot --skill security-scan-l8yh1
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security_scan
Source: https://github.com/l8yh1/sainxbot/tree/main/.local/skills/security_scan
Command: npx skills add https://github.com/l8yh1/sainxbot --skill security-scan-l8yh1

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Automates three security scans (dependency audit, SAST, and dataflow/hounddog) and returns a concise, prioritized vulnerability report to reduce risk and manual review time.

Core Features & Use Cases

  • Parallel execution of runDependencyAudit(), runSastScan(), and runHoundDogScan() with graceful handling of per-scanner failures.
  • Minimal, structured output including counts by severity and key vulnerability details across dependencies, code, and data flows.
  • Use in CI pipelines or ad-hoc security reviews to quickly surface critical findings for remediation.

Quick Start

Run the security_scan skill against your repository to generate a prioritized security summary.

Frequently Asked Questions about security_scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security scanning and generate a prioritized vulnerability report?▼

Automate security scanning by running dependency audit, SAST, and dataflow scanners in parallel, compiling a prioritized vulnerability report with severity counts and detailed findings.

What is a combined SAST and dependency audit scan for CI pipelines?▼

A combined SAST and dependency audit scan runs static analysis and dependency checks simultaneously against codebases, returning a structured payload with vulnerability counts and key details for remediation.

Can I run dependency, SAST, and dataflow scans in parallel without failing the entire pipeline?▼

Yes, you can run dependency, SAST, and dataflow scans in parallel with per-scanner failure tolerance, ensuring the pipeline continues and generates a report even if one scanner fails.

What's the best way to identify dataflow and privacy issues in my codebase?▼

The best way to identify dataflow and privacy issues is using an automated dataflow scanner that traces data movements, surfacing critical findings within a structured vulnerability report.

Why does my security scanner return incomplete vulnerability findings when one tool fails?▼

Security scanning with per-scanner failure tolerance returns incomplete vulnerability findings when one tool fails, capturing available results from successful scanners rather than halting execution entirely.