Agent skill · security · aradotso
agentic-security-scanner
AI-powered security scanner for agentic workflows with plain-English findings, dollar-cost estimates, and auto-fix capabilities
Why this skill is useful
Adds executable commands for comprehensive security scanning and auto-fixing vulnerabilities that the AI cannot generate on its own.
What it needs
Requires @clear-capabilities/agentic-security-scanner installed locally. About 7k tokens when loaded. Last updated 2026-08-04. 11 stars on the source repository.
What this skill does
agentic-security Skill by ara.so — Security Skills collection agentic-security is a comprehensive security scanner built for AI-driven development workflows. It provides plain-English vulnerability findings with real-world cost estimates, auto-fix capabilities, and compliance framework attestations across 8 languages. What It Does 12-pillar security scan: SAST, SCA, secrets, IaC, LLM safety, MCP agent-tool audit, auth/authZ, pipeline integrity, containers, deploy config, supply chain, and trend tracking Plain-English findings: No CVE jargon—shows stakes, estimated cost, and concrete fixes Auto-fix with preview: One-command remediation with backup and revert capabilities Compliance reports: NIST AI 600-1, OWASP ASVS, OWASP LLM Top 10, EU AI Act CISA KEV + EPSS prioritization: Focus on actively exploited vulnerabilities Function-level reachability: Know which dependency vulnerabilities actually affect your code Real-time bodyguard: Intercepts insecure AI-generated code before it hits disk Installation As Claude Code Plugin Then restart Claude Code or run /reload-plugins. As CLI Tool Update Plugin Core Commands /agentic-security:secure Router command that picks the best next action based on project state. /agentic-security:scan Run security scanner with various modes. /agentic-security:triage Investigate and validate findings. /agentic-security:fix Remediate vulnerabilities with auto-fix. /agentic-security:find-and-fix-everything One-shot scan and fix for all severities. Compliance & Reporting Generate Compliance Report Interactive Compliance Walkthrough Posture & Status Supply Chain Security Setup & Integration Install Git Hooks (Bodyguard Mode) Intercepts insecure AI-generated code in real-time. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/agentic-security-scanner