Agent skill · security · davila7
vulnerability-scanner
Advanced vulnerability analysis principles. OWASP 2025, Supply Chain Security, attack surface mapping, risk prioritization.
Why this skill is useful
Adds an executable script for automated security validation and detailed risk prioritization frameworks that are not commonly known.
What it needs
Requires python installed locally. About 5k tokens when loaded. Last updated 2026-08-06. 30,138 stars on the source repository.
What this skill does
Vulnerability Scanner Think like an attacker, defend like an expert. 2025 threat landscape awareness. 🔧 Runtime Scripts Execute for automated validation: Script Purpose Usage -------- --------- ------- scripts/securityscan.py Validate security principles applied python scripts/securityscan.py <projectpath> 📋 Reference Files File Purpose ------ --------- checklists.md OWASP Top 10, Auth, API, Data protection checklists --- 1. Security Expert Mindset Core Principles Principle Application ----------- ------------- Assume Breach Design as if attacker already inside Zero Trust Never trust, always verify Defense in Depth Multiple layers, no single point Least Privilege Minimum required access only Fail Secure On error, deny access Threat Modeling Questions Before scanning, ask: 1. What are we protecting? (Assets) 2. Who would attack? (Threat actors) 3. How would they attack? (Attack vectors) 4. What's the impact? (Business risk) --- 2. OWASP Top 10:2025 Risk Categories Rank Category Think About ------ ---------- ------------- A01 Broken Access Control Who can access what? IDOR, SSRF A02 Security Misconfiguration Defaults, headers, exposed services A03 Software Supply Chain 🆕 Dependencies, CI/CD, build integrity A04 Cryptographic Failures Weak crypto, exposed secrets A05 Injection User input → system commands A06 Insecure Design Flawed architecture A07 Authentication Failures Session, credential management A08 Integrity Failures Unsigned updates, tampered data A09 Logging & Alerting Blind spots, no monitoring A10 Exceptional Conditions 🆕 Error handling, fail-open states 2025 Key Changes --- 3. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills davila7/vulnerability-scanner