Description
vulnerability-scanner is an agent skill for advanced vulnerability analysis. Its principles are to think like an attacker and defend like an expert, with awareness of the 2025 threat landscape. It covers OWASP 2025, supply-chain security, attack-surface mapping and risk prioritisation. It includes a runtime script, security_scan.py, that you run against a project path to validate that the security principles have been applied, and a reference file with checklists for the OWASP Top 10, authentication, APIs and data protection. Use it when you want an organised review of a project's exposure: where its attack surface is, which weaknesses matter most, and whether its dependencies carry known risk. The scan is a structured aid, not a full penetration test, so its results should be followed up by a person. It is part of the sickn33/agentic-awesome-skills repository on GitHub, which has about 47,600 stars. The listing shows it as free, and it has about 1,300 installs. Its security audits show passes from Gen Agent Trust Hub and Socket, with a warning from Snyk. Install it with npx skills add https://github.com/sickn33/agentic-awesome-skills --skill vulnerability-scanner.…
Highlights
- OWASP Top 10 and 2025 threat awareness
- Supply-chain security
- Attack-surface mapping
- Risk prioritisation
- Runnable security_scan.py script
Ratings & Reviews
No ratings yet
Be the first to rate vulnerability-scanner.
People also visit
canvas-design
Create beautiful visual art in .png and .pdf documents using design philosophy
vulnerability-scanner FAQ
What does the scanner check?
Principles and checklists covering OWASP Top 10, authentication, APIs, data protection and supply-chain security.
How is the script used?
You run scripts/security_scan.py with the project path to validate the security principles applied.
Does it replace a penetration test?
No. It is a structured aid, and its results should be followed up by a person.
How do I install it?
Run npx skills add https://github.com/sickn33/agentic-awesome-skills --skill vulnerability-scanner.
What do the security audits show?
skills.sh lists three audits: Gen Agent Trust Hub Pass, Socket Pass and Snyk Warn. A Warn or Fail is worth reading before you install.
What are the best vulnerability-scanner alternatives?
Popular alternatives to vulnerability-scanner include implement, brand-guidelines and canvas-design. See all vulnerability-scanner alternatives