security-scanner
This skill scans your code for security vulnerabilities and provides actionable remediation guidance. It helps development teams quickly identify and address potential risks before they reach production, streamlining the security review process.
security-scanner is a comprehensive code security analysis tool that identifies and remediates security vulnerabilities in your codebase. It scans your code for potential risks and provides actionable remediation guidance, helping development teams quickly address issues before they reach production and streamline the security review process.
AI-generated summary based on this skill's SKILL.md
Install
AIDotNet/MoYuCode/security-scanner · repository language: TypeScript
git clone https://github.com/AIDotNet/MoYuCode
cp -r MoYuCode/skills/community/security-scanner ~/.claude/skills/security-scannerFrequently asked questions
AI-generated answers based on this skill's SKILL.md and metadata
What security scanner for code vulnerabilities does this skill provide?
security-scanner is a comprehensive code security analysis tool that identifies and remediates security vulnerabilities in your codebase. It scans your code for potential risks and provides actionable remediation guidance, helping development teams quickly address issues before they reach production and streamline the security review process.
Can security-scanner find OWASP top 10 issues in my code?
Yes, security-scanner is designed to ensure OWASP Top 10 compliance and security best practices. It actively scans for common vulnerabilities and misconfigurations that fall within the OWASP Top 10 framework, helping you identify and remediate these high-priority security risks in your application.
How does security-scanner detect hardcoded secrets and exposed credentials?
security-scanner includes specialized detection for hardcoded secrets and exposed credentials, scanning your codebase for API keys, passwords, tokens, and other sensitive data that should never be committed to version control. This helps prevent credential exposure and reduces the risk of unauthorized access to your systems.
Does security-scanner check for SQL injection and XSS vulnerabilities?
security-scanner validates input handling and prevents injection attacks, including SQL injection and cross-site scripting (XSS) vulnerabilities. It analyzes how your application processes user input and identifies potential weaknesses that could allow attackers to inject malicious code or commands.
What authentication and authorization issues can security-scanner review?
security-scanner reviews authentication, authorization, and security headers to ensure your application implements proper access controls and security configurations. It checks for weak authentication mechanisms, missing authorization checks, and improper security header settings that could expose your application to unauthorized access or attacks.
Is security-scanner available under an open-source license?
Yes, security-scanner is released under the MIT license, making it freely available for both commercial and personal use. The MIT license allows you to use, modify, and distribute the tool while maintaining attribution to the original authors.
SKILL.md
rendered from the published skill — quoted content, verbatim
Security Scanner Skill
Description
Perform security-focused code analysis to identify vulnerabilities and security issues.
Trigger
/securitycommand- User requests security review
- User asks about vulnerabilities
Prompt
You are a security expert that identifies vulnerabilities and recommends fixes.
SQL Injection Prevention
// ❌ VULNERABLE: SQL Injection
const query = `SELECT * FROM users WHERE email = '${email}'`;
// ✅ SAFE: Parameterized query
const query = 'SELECT * FROM users WHERE email = $1';
const result = await db.query(query, [email]);
// ✅ SAFE: Using ORM
const user = await prisma.user.findUnique({ where: { email } });
XSS Prevention
// ❌ VULNERABLE: XSS in React (rare but possible)
<div dangerouslySetInnerHTML={{ __html: userInput }} />
// ✅ SAFE: Sanitize HTML
import DOMPurify from 'dompurify';
<div dangerouslySetInnerHTML={{ __html: DOMPurify.sanitize(userInput) }} />
// ✅ SAFE: Use text content (React auto-escapes)
<div>{userInput}</div>
Authentication
(truncated - see the full file via the links below)
Read as markdown · JSON record · Browse the source repository
File tree — 1 file
skills/community/security-scanner/SKILL.md