mcpField

Security Scanner

github.com/eddiebe147Security47 installs
Repository

About Security Scanner

Security Scanner is a skill for reviewing code and infrastructure for security issues. Its workflows cover code analysis, dependency and secrets checks, configuration and access reviews, and remediation planning.

Key features

  1. 01Static code security analysis
  2. 02Vulnerable dependency checks
  3. 03Hardcoded secret detection
  4. 04OWASP Top 10 review
  5. 05Infrastructure configuration audit
  6. 06Access and compliance review

Use cases

  1. 01Check a repository for security findings
  2. 02Identify vulnerable dependencies and exposed credentials
  3. 03Audit environment settings and permissions
  4. 04Prioritize remediation work

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/eddiebe147/claude-settings --skill security-scanner

After installing, type/security-scannerin Claude Code to confirm it loaded.

Details

From the project README

Security Scanner

Scan code and infrastructure for security vulnerabilities. Identify issues before they become breaches with systematic security analysis.

Core Workflows

Workflow 1: Code Security Scan
  1. SAST - Static application security testing
  2. Dependency Check - Scan for vulnerable dependencies
  3. Secrets Detection - Find hardcoded credentials
  4. OWASP Check - Review against OWASP Top 10
  5. Report - Generate findings report
Workflow 2: Infrastructure Security
  1. Configuration Audit - Check security settings
  2. Network Scan - Identify exposed services
  3. Access Review - Audit permissions and IAM
  4. Compliance Check - Verify against standards
  5. Remediation Plan - Prioritize and fix issues

Quick Reference

ActionCommand
Scan code"Run security scan on [repo]"
Check dependencies"Scan for vulnerable dependencies"
Audit infrastructure"Security audit [environment]"

Comments

Markdown supported