Vulnerability Scanner
This one trains Claude to think like a security researcher, not just run a scanner. It covers OWASP Top 10 2025 (including the new supply chain and exceptional conditions categories), teaches threat modeling, and shows you how to prioritize findings with CVSS and EPSS scores instead of drowning in CVE noise. The methodology is phase-based: reconnaissance, discovery, analysis, reporting. What I like here is the emphasis on root causes over symptoms and the fail-secure mindset throughout. It includes runtime validation scripts and checklists for auth, APIs, and data protection. Use this when you need structured security analysis that considers business context, not just a raw vulnerability dump.
- skills.sh installs
- 394
- GitHub stars
- 33.2K
- last updated
- Aug 21, 2026
Install
$ npx -y skills add davila7/claude-code-templates --skill vulnerability-scanner --agent claude-codeInstalls into .claude/skills of the current project.
Files
Vulnerability Scanner
Think like an attacker, defend like an expert. 2025 threat landscape awareness.
🔧 Runtime Scripts
Execute for automated validation:
| Script | Purpose | Usage |
|---|---|---|
scripts/security_scan.py | Validate security principles applied | python scripts/security_scan.py <project_path> |
📋 Reference Files
| File | Purpose |
|---|---|
| checklists.md | OWASP Top 10, Auth, API, Data protection checklists |
1. Security Expert Mindset
Core Principles
| Principle | Application |
|---|---|
| Assume Breach | Design as if attacker already inside |
| Zero Trust | Never trust, always verify |
| Defense in Depth | Multiple layers, no single point |
| Least Privilege | Minimum required access only |
| Fail Secure | On error, deny access |
Threat Modeling Questions
Before scanning, ask:
- What are we protecting? (Assets)
- Who would attack? (Threat actors)
- How would they attack? (Attack vectors)
- What's the impact? (Business risk)
2. OWASP Top 10:2025
Risk Categories
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/davila7/claude-code-templates
- Category
- Security
- First seen
- Jun 3, 2026
More from davila7/claude-code-templates
All 618- Design System Starter393
- Using Superpowers393
- Venue Templates393
- Rag Engineer392
- Spreadsheet392
- Stripe Integration392
- Perplexity391
- Skill Installer391
- Documentation Templates390
- Firebase390
- Isms Audit Expert390
- Huggingface Accelerate389
- Writing Skills389
- Gemini388
- Lead Research Assistant386
- Prisma Expert386
- Clinical Decision Support384
- Theme Factory384
- Transformers383
- Systematic Debugging382
- Task Execution Engine382
- Pydicom381
- Weights And Biases381
- Segment Anything Model380
Recommended
More Security
cloudflare-workers-securitysecondsky/claude-skillsCloudflare Workers security with authentication, CORS, rate limiting, input validation. Use for securing APIs, JWT/API keys, or encountering auth failures, CORS369skills.sh installs
auth-security-reviewerpatricio0312rev/skillsReviews authentication and authorization implementation for session management, CSRF, cookie security, and auth flow vulnerabilities with findings, severity ass352skills.sh installs
ln-621-security-auditorlevnikolaevich/claude-code-skillsChecks hardcoded secrets, SQL injection, XSS, insecure deps, input validation. Use when auditing security.337skills.sh installs
pentest-expertduck4nh/antigravity-kitPenetration testing methodology expert. OWASP, PTES, reconnaissance, scanning, exploitation, reporting. Use for security assessments.332skills.sh installs
accelint-security-best-practicesgohypergiant/agent-skillsComprehensive security audit and vulnerability detection for JavaScript/TypeScript applications following OWASP Top 10. Use when (1) Users say 'audit security',323skills.sh installs
api-security-reviewbobmatnyc/claude-mpm-skillsAPI security checklist for reviewing endpoints before deployment. Use when creating or modifying API routes to ensure proper authentication, authorization, and 257skills.sh installs