Vulnerability Scanning

Automates security vulnerability detection across your stack using npm audit, OWASP tools, and CVE databases. You'd reach for this when setting up pre-deployment security checks, running compliance audits for PCI-DSS or SOC 2, or building continuous monitoring into your CI/CD pipeline. The skill covers dependency scanning, container security, secret detection, and infrastructure assessment. One honest take: the multi-tool approach is smart since no single scanner catches everything, and the included GitHub Actions examples make it easy to gate deployments on severity thresholds. Just be prepared to manage false positives and understand that automated scanning is your first line of defense, not your only one.

skills.sh installs: 617
GitHub stars: 379
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add aj-geddes/useful-ai-prompts --skill vulnerability-scanning --agent claude-code

Installs into .claude/skills of the current project.

Files

Overview

Systematically identify security vulnerabilities in applications, dependencies, and infrastructure using automated scanning tools and manual security assessments.

When to Use

Pre-deployment security checks
Continuous security monitoring
Compliance audits (PCI-DSS, SOC 2)
Dependency vulnerability detection
Container security scanning
Infrastructure security assessment

Quick Start

Minimal working example:

// scanner.js - Comprehensive vulnerability scanning
const { exec } = require("child_process");
const util = require("util");
const fs = require("fs").promises;

const execPromise = util.promisify(exec);

class VulnerabilityScanner {
  constructor() {
    this.results = {
      dependencies: [],
      code: [],
      docker: [],
      secrets: [],
    };
  }

  async scanDependencies() {
    console.log("Scanning dependencies with npm audit...");

SKILL.md on GitHub