mcpField
S
Security Scanner

Security Scanner

github.com/jmsktmSecurity10208 installsUpdated 40w ago
Repository

About Security Scanner

Security Scanner is a skill for checking code and infrastructure for security issues. Its workflows cover static analysis, dependencies, secrets, configuration, network exposure, access, and compliance.

Key features

  1. 01Run static code analysis
  2. 02Check vulnerable dependencies
  3. 03Detect hardcoded secrets
  4. 04Review OWASP Top 10
  5. 05Audit infrastructure settings
  6. 06Plan prioritized remediation

Use cases

  1. 01Scan a repository for security issues
  2. 02Check dependencies for vulnerabilities
  3. 03Audit an environment's configuration and access
  4. 04Prioritize fixes after a security review

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/jmsktm/claude-settings --skill security-scanner

After installing, type/security-scannerin Claude Code to confirm it loaded.

Details

From the project README

Security Scanner

Scan code and infrastructure for security vulnerabilities. Identify issues before they become breaches with systematic security analysis.

Core Workflows

Workflow 1: Code Security Scan
  1. SAST - Static application security testing
  2. Dependency Check - Scan for vulnerable dependencies
  3. Secrets Detection - Find hardcoded credentials
  4. OWASP Check - Review against OWASP Top 10
  5. Report - Generate findings report
Workflow 2: Infrastructure Security
  1. Configuration Audit - Check security settings
  2. Network Scan - Identify exposed services
  3. Access Review - Audit permissions and IAM
  4. Compliance Check - Verify against standards
  5. Remediation Plan - Prioritize and fix issues

Quick Reference

ActionCommand
Scan code"Run security scan on [repo]"
Check dependencies"Scan for vulnerable dependencies"
Audit infrastructure"Security audit [environment]"

Comments

Markdown supported