security-scanner
This skill scans your code for security vulnerabilities and provides actionable remediation guidance. It helps development teams quickly identify and address potential risks before they reach production, streamlining the security review process.
security-scanner is a comprehensive code security analysis tool that identifies and remediates security vulnerabilities in your codebase. It scans your code for potential risks and provides actionable remediation guidance, helping development teams quickly address issues before they reach production and streamline the security review process.
AI-generated summary based on this skill's SKILL.md
Decision gist · record as of 2026-01-28
security-scanner is a comprehensive code security analysis tool that identifies and remediates security vulnerabilities in your codebase. It scans your code for potential risks and provides actionable remediation guidance, helping development teams quickly address issues before they reach production and streamline the security review process.
Use it when
- Yes, security-scanner is designed to ensure OWASP Top 10 compliance and security best practices.
- security-scanner includes specialized detection for hardcoded secrets and exposed credentials, scanning your codebase for API keys.
Verify before relying
Read SKILL.md below before installing (1 file). Open directory: indexed for reading, not audited.
Install
AIDotNet/MoYuCode/security-scanner · repository language: TypeScript
Open directory. Skills are indexed for reading, not audited. Review a skill's body before installing it.
Frequently asked questions
AI-generated answers based on this skill's SKILL.md and metadata
What security scanner for code vulnerabilities does this skill provide?
security-scanner is a comprehensive code security analysis tool that identifies and remediates security vulnerabilities in your codebase. It scans your code for potential risks and provides actionable remediation guidance, helping development teams quickly address issues before they reach production and streamline the security review process.
Can security-scanner find OWASP top 10 issues in my code?
Yes, security-scanner is designed to ensure OWASP Top 10 compliance and security best practices. It actively scans for common vulnerabilities and misconfigurations that fall within the OWASP Top 10 framework, helping you identify and remediate these high-priority security risks in your application.
How does security-scanner detect hardcoded secrets and exposed credentials?
security-scanner includes specialized detection for hardcoded secrets and exposed credentials, scanning your codebase for API keys, passwords, tokens, and other sensitive data that should never be committed to version control. This helps prevent credential exposure and reduces the risk of unauthorized access to your systems.
Does security-scanner check for SQL injection and XSS vulnerabilities?
security-scanner validates input handling and prevents injection attacks, including SQL injection and cross-site scripting (XSS) vulnerabilities. It analyzes how your application processes user input and identifies potential weaknesses that could allow attackers to inject malicious code or commands.
What authentication and authorization issues can security-scanner review?
security-scanner reviews authentication, authorization, and security headers to ensure your application implements proper access controls and security configurations. It checks for weak authentication mechanisms, missing authorization checks, and improper security header settings that could expose your application to unauthorized access or attacks.
Is security-scanner available under an open-source license?
Yes, security-scanner is released under the MIT license, making it freely available for both commercial and personal use. The MIT license allows you to use, modify, and distribute the tool while maintaining attribution to the original authors.
SKILL.md
Rendered from the published skill. Quoted content, verbatim.
Security Scanner Skill
Description
Perform security-focused code analysis to identify vulnerabilities and security issues.
Trigger
/securitycommand- User requests security review
- User asks about vulnerabilities
Prompt
You are a security expert that identifies vulnerabilities and recommends fixes.
SQL Injection Prevention
// ❌ VULNERABLE: SQL Injection
const query = `SELECT * FROM users WHERE email = '${email}'`;
// ✅ SAFE: Parameterized query
const query = 'SELECT * FROM users WHERE email = $1';
const result = await db.query(query, [email]);
// ✅ SAFE: Using ORM
const user = await prisma.user.findUnique({ where: { email } });
XSS Prevention
// ❌ VULNERABLE: XSS in React (rare but possible)
<div dangerouslySetInnerHTML={{ __html: userInput }} />
// ✅ SAFE: Sanitize HTML
import DOMPurify from 'dompurify';
<div dangerouslySetInnerHTML={{ __html: DOMPurify.sanitize(userInput) }} />
// ✅ SAFE: Use text content (React auto-escapes)
<div>{userInput}</div>
Authentication
(truncated - see the full file via the links below)
File tree — 1 file
skills/community/security-scanner/SKILL.md
Let your AI agent find skills like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 56,283 agent skills by what they can do, searchable in plain language.
wish › “Identify and remediate security vulnerabilities in code”
Give your agent the search over MCP, or paste the wish link into any chat. No install? Search from any chat →
Related skills
This skill helps you integrate security best practices and OWASP-aligned patterns directly into your codebase, whether you're starting fresh or hardening existing systems. It guides you through vulnerability assessment, secure coding patterns, and compliance-focused implementation strategies to reduce risk and build defensible applications.
This skill teaches you to recognize and defend against the OWASP Top 10 security vulnerabilities that threaten modern applications. Through practical guidance on threat identification and mitigation strategies, you'll build the defensive coding practices needed to protect your software from common attacks and exploits.
Security Engineer provides a comprehensive framework for implementing authentication and authorization in web applications. Leverage AI-assisted development standards to design secure access controls, manage user credentials, and enforce permission policies across your platform.
This skill equips you with essential knowledge of the OWASP Top 10—the most critical web application security risks—and demonstrates how to identify and remediate each vulnerability in your codebase. Through hands-on code examples and defensive techniques, you'll learn to build more resilient applications and protect against common attack vectors.
This skill equips developers with practical techniques to defend against cross-site scripting (XSS) vulnerabilities through input sanitization and secure output encoding. Master the core defensive patterns needed to protect web applications from malicious script injection and ensure safe handling of untrusted data across your codebase.
nodemailer enables Node.js developers to dispatch transactional emails programmatically with straightforward configuration and robust delivery handling. Whether you're sending password resets, order confirmations, or notifications, this skill integrates email functionality directly into your application workflow.
More skills Typescript Security (GFDL-1.3) · git-stats (MIT) · http-client (MIT)