Voltar ao Marketplace
SecurityAvançadoVerificado

Security Scanner

porTHIAGONOMA·THIAGONOMA· v2.2.0 · atualizado em 2026-03-15
89
Score

Scans code for vulnerabilities, exposed secrets, insecure dependencies and dangerous code patterns.

securityvulnerabilityscanningsast
Linguagens
TypeScriptJavaScriptPythonJavaGo
2.2KStars
215Forks
38.5KUsos
Fork

Documento do Skill

SKILL.mdsecurity-scanner/workflow
Security Scanning Workflow
1. **SENSE** — Identify scope via Filesystem MCP
List project files
Detect languages and frameworks
Identify sensitive files (.env, credentials, keys)
2
CONTEXTUALIZEMap attack surface
Identify exposed endpoints
Map dependencies and versions (package.json, requirements.txt)
Check known CVEs in dependencies
3. **HYPOTHESIZE** — Scan vulnerabilities via Security Scanner MCP
Hardcoded secrets (API keys, passwords, tokens)
SQL injection, XSS, CSRF patterns
Insecure settings (open CORS, debug mode in prod)
Dependencies with known CVEs
4
EVALUATEClassify by severity (CVSS)
Critical (9.0-10.0): RCE, data breach
High (7.0-8.9): injection, auth bypass
Medium (4.0-6.9): XSS, info disclosure
Low (0.1-3.9): configuration, best practices
5
RECOMMENDGenerate report with remediations
For each vulnerability: description + fix + reference
Prioritize by risk and ease of fix
Suggested patches with code

Telemetria de Agentes

Execuções
38.5K
total
Taxa de Sucesso
92%
últimos 30d
Latência Média
5.2s
p50
Alucinação
1.0%
detecção

Uso por Plataforma

cursor18.2K
claude-code13.8K
codex6.5K

Árvore do Skill

Security Scanner
security-scanner
Fases Cognitivas5
1.SENSE
2.CONTEXTUALIZE
3.HYPOTHESIZE
4.EVALUATE
5.RECOMMEND
Triggers6
scan securityvulnerability checksecurity auditfind secretssast scanescanear segurança
MCP Servers2
📁
Filesystem MCP
Reading and writing files in the project workspace
AutoLocal workspace access
⚙️
Security Scanner MCP
Static code analysis, secret detection and vulnerability scanning
AutoIntegrated local scanner

Avaliar este Skill

Score Breakdown

Avaliação Humana87%
🤖Sucesso de Agentes92%
🕐Atualidade90%
🔗Saúde de Dependências95%
🕸️Centralidade no Grafo78%
🛡️Segurança49%
CompositeScore = α·Humano + β·Agente + γ·Recência + δ·Deps + ε·Centralidade + ζ·Segurança

Instalação

$ skillschain install security-scanner
$ skillschain use security-scanner