Security scan

Skill scikrikci/skills/skills/security_scan

Reusable AI agent skills library (SKILL.md) for Codex/Copilot/Claude-style workflows.

Install

npx -y skills add scikrikci/skills --skill security_scan

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

2 things to look at

no licenseNo license file was found in the repository. Code published without one is not open source by default, so using it at work is a question for whoever answers licensing questions where you are.
0 stars0 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

What its author says it does

Copied from the file, not written here

Run runDependencyAudit, runSastScan, and runHoundDogScan and return a concise, prioritized security summary with critical/high findings first. Must use this skill if security scanning is explicitly requested by the user.

SKILL.md

1.7 KB, as published. Nobody here has run it

Security Scan Skill

Run three independent scanners and summarize results:

runDependencyAudit() for package/dependency vulnerabilities
runSastScan() for static code findings
runHoundDogScan() for privacy/security dataflow findings

Orchestration

For full scans, run scanners in parallel and tolerate per-scanner failures.

const [depResult, sastResult, hounddogResult] = await Promise.allSettled([
  runDependencyAudit(),
  runSastScan(),
  runHoundDogScan(),
]);

const dep = depResult.status === 'fulfilled' ? depResult.value : null;
const sast = sastResult.status === 'fulfilled' ? sastResult.value : null;
const hounddog =
  hounddogResult.status === 'fulfilled' ? hounddogResult.value : null;

Do not fail the whole scan because one scanner errors.

Minimal Response Shape

runDependencyAudit()
- metadata.vulnerabilities: { info, low, moderate, high, critical }
- vulnerabilities[]: id, package, severity, fix, source
runSastScan()
- results[]: checkId, message, severity, fingerprint, location
runHoundDogScan()
- vulnerabilities[]: hash, ruleIds, message, severity, location, privacyViolations, remediation*

Output Expectations

Return concise results instead of dumping full payloads:

Per scanner: status (ok or error) and count by severity.
Top critical/high findings with file path and short message.
A short remediation plan, with risky/breaking changes clearly called out.