Vulnerability Scanner

This is a security analysis framework that teaches Claude to think like a penetration tester while reviewing code and architecture. It covers OWASP Top 10 2025 including the new supply chain and exceptional conditions categories, plus practical checklists for authentication, APIs, and data protection. The skill includes a Python validation script and prioritization guidance that weighs CVSS scores against actual exploit likelihood. Use it when you need threat modeling or vulnerability assessment that goes beyond automated scanner output. The emphasis on fail-secure patterns and attack surface mapping makes it more useful for design review than just finding CVEs in dependencies.

skills.sh installs: 1K
GitHub stars: 43.1K
last updated: Jul 14, 2026

View on GitHub

Install

$ npx -y skills add sickn33/antigravity-awesome-skills --skill vulnerability-scanner --agent claude-code

Installs into .claude/skills of the current project.

Files

Vulnerability Scanner

Think like an attacker, defend like an expert. 2025 threat landscape awareness.

🔧 Runtime Scripts

Optional heuristic scan (not security validation):

Script	Purpose	Usage
`scripts/security_scan.py`	Validate security principles applied	`python scripts/security_scan.py <project_path>`

📋 Reference Files

File	Purpose
checklists.md	OWASP Top 10, Auth, API, Data protection checklists

1. Security Expert Mindset

Core Principles

Principle	Application
Assume Breach	Design as if attacker already inside
Zero Trust	Never trust, always verify
Defense in Depth	Multiple layers, no single point
Least Privilege	Minimum required access only
Fail Secure	On error, deny access