Scanning for vulnerabilities
425 plugins, 2,810 skills, 200 agents for Claude Code. Open-source marketplace at tonsofskills.com with the ccpi CLI package manager.
npx -y skills add jeremylongshore/claude-code-plugins-plus-skills --skill scanning-for-vulnerabilitiesAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
What its author says it does
Copied from the file, not written here
'Execute this skill enables comprehensive vulnerability scanning using the vulnerability-scanner plugin. it identifies security vulnerabilities in code, dependencies, and configurations, including cve detection. use this skill when the user asks to scan fo... Use when appropriate context detected. Trigger with relevant phrases based on skill purpose.
The file declares its own license as MIT. That is the author’s claim about this one file, and it is not the same thing as the license GitHub reports for the repository, which is listed with the other numbers below.
SKILL.md
3.7 KB, as published. Nobody here has run it
Vulnerability Scanner
Scan codebases, dependencies, and configurations for security vulnerabilities including CVE detection, code-level flaws, and insecure defaults, with severity ratings and remediation steps.
Overview
This skill empowers Claude to automatically scan your codebase for security vulnerabilities. It leverages the vulnerability-scanner plugin to identify potential risks, including code-level flaws, vulnerable dependencies, and insecure configurations.
How It Works
- Initiate Scan: The skill activates the vulnerability-scanner plugin based on user input.
- Perform Analysis: The plugin scans the codebase, dependencies, and configurations for vulnerabilities, including CVE detection.
- Generate Report: The plugin creates a detailed vulnerability report with findings, severity levels, and remediation guidance.
When to Use This Skill
This skill activates when you need to:
- Identify security vulnerabilities in your code.
- Check your project's dependencies for known CVEs.
- Review your project's configurations for security weaknesses.
Examples
Example 1: Identifying SQL Injection Risks
User request: "Scan my code for SQL injection vulnerabilities."
The skill will:
- Activate the vulnerability-scanner plugin.
- Analyze the codebase for potential SQL injection flaws.
- Generate a report highlighting any identified SQL injection risks and providing remediation steps.
Example 2: Checking for Vulnerable npm Packages
User request: "Check my project's npm dependencies for known vulnerabilities."
The skill will:
- Activate the vulnerability-scanner plugin.
- Scan the project's
package.jsonfile and identify any npm packages with known CVEs. - Generate a report listing the vulnerable packages, their CVE identifiers, and recommended updates.
Best Practices
- Regular Scanning: Run vulnerability scans regularly, especially before deployments.
- Prioritize Remediation: Focus on addressing critical and high-severity vulnerabilities first.
- Validate Fixes: After applying fixes, run another scan to ensure the vulnerabilities are resolved.
Integration
This skill integrates with the core Claude Code environment by providing automated vulnerability scanning capabilities. It can be used in conjunction with other plugins to create a comprehensive security workflow, such as integrating with a ticketing system to automatically create tickets for identified vulnerabilities.
Prerequisites
- Appropriate file access permissions
- Required dependencies installed
Instructions
- Invoke this skill when the trigger conditions are met
- Provide necessary context and parameters
- Review the generated output
- Apply modifications as needed
Output
The skill produces structured output relevant to the task.
Error Handling
- Invalid input: Prompts for correction
- Missing dependencies: Lists required components
- Permission errors: Suggests remediation steps
Resources
- Project documentation
- Related skills and commands