Vulnerability Scanner

This one walks you through security scanning with a threat modeling mindset rather than just running tools. You get OWASP Top 10:2025 coverage including the new supply chain and exceptional conditions categories, plus attack surface mapping and risk prioritization frameworks that combine CVSS with actual exploitability data. The phase-based methodology (reconnaissance, discovery, analysis, reporting) keeps you from just dumping CVE alerts without context. What I like is the emphasis on root causes over symptoms and the fail-secure principles for edge cases. Includes reference checklists and a validation script. Best for when you need to actually think through security risks, not just generate a scan report.

skills.sh installs: 127
GitHub stars: 7.6K
last updated: Jun 3, 2026

View on GitHub

Install

$ npx -y skills add vudovn/antigravity-kit --skill vulnerability-scanner --agent claude-code

Installs into .claude/skills of the current project.

Files

Vulnerability Scanner

Think like an attacker, defend like an expert. 2025 threat landscape awareness.

🔧 Runtime Scripts

Execute for automated validation:

Script	Purpose	Usage
`scripts/security_scan.py`	Validate security principles applied	`python scripts/security_scan.py <project_path>`

📋 Reference Files

File	Purpose
checklists.md	OWASP Top 10, Auth, API, Data protection checklists

1. Security Expert Mindset

Core Principles

Principle	Application
Assume Breach	Design as if attacker already inside
Zero Trust	Never trust, always verify
Defense in Depth	Multiple layers, no single point
Least Privilege	Minimum required access only
Fail Secure	On error, deny access