Security Scan

Runs a comprehensive security audit of your codebase checking for OWASP Top 10 vulnerabilities, hardcoded secrets, injection flaws, and crypto weaknesses. You get three scan modes: full analysis that takes a few minutes, a quick scan under a minute for critical issues only, or focused scans on specific categories like injection or secrets. The output breaks findings into severity levels from critical to informational, showing you exactly where the issue is, why it matters, and how to fix it. What's practical here is the inline ignore comments for false positives and the project level config file to tune thresholds and exclude test fixtures. Best used before deploys or when inheriting unfamiliar code where you need to understand the security posture quickly.

skills.sh installs: 487
GitHub stars: 182
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add jwynia/agent-skills --skill security-scan --agent claude-code

Installs into .claude/skills of the current project.

Files

Security Scan

Comprehensive security vulnerability detection for codebases.

Quick Start

/security-scan                    # Full scan of current directory
/security-scan --scope src/       # Scan specific directory
/security-scan --quick            # Fast scan (critical issues only)
/security-scan --focus injection  # Focus on specific category