security-vulnerability-scan
OWASP-based vulnerability detection using automated security scanning tools-based skill consuming source_code, dependencies to produce security_findings
- License 许可
- Apache-2.0
- 最近更新
- 2026-11-02
- Stars
- ★ 0
- Forks
- 0
01 前言 Front Matter
- name
- security-vulnerability-scan
- description
- OWASP-based vulnerability detection using automated security scanning tools-based skill consuming source_code, dependencies to produce security_findings
03 SKILL.md 正文
Security Vulnerability Scan
Guardrails
- timeout: 300s
- max_files_per_scan: 1000
- require_backup_before_changes: true
Context
Consumes: source_code, dependencies Produces: security_findings Memory: short-term
Strategy
Approach: OWASP-based vulnerability detection using automated security scanning tools Tools: read_file, grep, search, bash
Steps
- Scan for OWASP Top 10 vulnerabilities
- Check input validation and sanitization
- Review authentication and authorization
- Analyze cryptographic implementations
- Assess dependency vulnerabilities
- Validate secrets management
Security
- Filesystem: read-only
- Network: allowlist
04 同仓库更多 Skills
identify-root-cause
Identify the root cause of the issue through detailed code examination-based skill consuming code_analysis, issue_description to produce root_cause
generate-code-fix
Generate minimal code changes that resolve the identified issue-based skill consuming root_cause, issue_description to produce code_patch
analyze-code-repository
Systematically analyze repository structure to locate code relevant to the issue-based skill consuming repository, issue_description to produce code_analysis
generate-code-patch
minimal code changes to resolve identified issue-based skill consuming bug_analysis, code_context to produce unified_diff_patch
analyze-bug-root-cause
systematic code analysis to identify root cause-based skill consuming issue_description, code_context to produce bug_analysis
unified-diff-patch-generator
Generate minimal unified diff patches for Python bug fixes-based skill consuming issue_analysis, python_codebase to produce unified_diff_patch