mcpField
S
security-scan

security-scan

github.com/ruvnetSecurity80.0k748 installsUpdated 1d ago
Repository

About security-scan

security-scan is a skill for running security checks at quick, standard, or deep depth. It uses the @claude-flow CLI and can store scan findings through MCP.

Key features

  1. 01Three scan depths
  2. 02Dependency and CVE checks
  3. 03Input and path checks
  4. 04Secrets and injection checks
  5. 05Threat modeling and auth-flow checks
  6. 06Store findings through MCP

Use cases

  1. 01Quickly check dependencies for known CVEs
  2. 02Inspect inputs and paths for risks
  3. 03Review injection vectors and authentication flows

MCP support

Uses MCP memory storage to save scan findings and a post-task hook to store results.

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/ruvnet/ruflo --skill security-scan

After installing, type/security-scanin Claude Code to confirm it loaded.

Details

From the project README

Run a security scan at the specified depth.

Via CLI:

npx @claude-flow/cli@latest security scan --depth DEPTH --output json
npx @claude-flow/cli@latest security cve --list
npx @claude-flow/cli@latest security threats --model stride --export md
DepthChecks
quickDependencies, known CVEs
standard+ Input validation, path traversal, secrets
deep+ Threat modeling, injection vectors, auth flows

Store findings via MCP: mcp__plugin_ruflo-core_ruflo__memory_store({ key: "scan-findings", value: "SUMMARY", namespace: "security-findings" })

Train patterns: mcp__plugin_ruflo-core_ruflo__hooks_post-task({ taskId: "security-scan", success: true, storeResults: true })

Comments

Markdown supported