Best vulnerability scanning skills, page 5

Audit CVE/vulnerability source coverage for a technology stack.

notque/vexjoy-agent

Zimbra SOAP user enum, CVE-2022-37042, SSRF when webmail. An agent skill from uphiago/recon-skills.

uphiago/recon-skills

A skill your agent uses when the user says 'licensing', 'license audit', 'can I use this commercially', 'OSS license check', 'license compatibility', 'GPL', 'MIT', 'AGPL', 'copyleft'.

cwinvestments/memstack

Vulnerability-research loop toward a novel CVE. An agent skill from Encod3d-Sec/TORCH.

Encod3d-Sec/TORCH

[omh] Security event on the code already shipped -- a CVE in a dependency, a secret committed to the repo, a license question, an advisory: triage reachability and severity, contain in order, and…

rlaope/oh-my-hermes

Detect package managers and CI action pins, then discover outdated or vulnerable dependencies.

tobihagemann/turbo

Handle CVE/vulnerability reports from security linters (trivy, osv-scanner, etc.).

hardisgroupcom/sfdx-hardis

Configure and execute authenticated (credentialed) vulnerability scans using OpenVAS/Greenbone Vulnerability Management (GVM) with SSH, SMB, or ESXi credentials to detect local vulnerabilities…

mukul975/Anthropic-Cybersecurity-Skills

A skill your agent uses when auditing dependency health — outdated packages, CVE triage with attack-vector weighting, deprecated/declining library detection (trend-watch).

mizchi/skills

A skill your agent uses when conducting a frontend security review — static analysis (risky HTML patterns, env var exposure), authentication/authorization audit (token storage, route guards…

mizchi/skills

Analyze code, infrastructure, and configurations by conducting comprehensive security audits.

jeremylongshore/tons-of-skills-marketplace

Execute this skill enables comprehensive vulnerability scanning using the vulnerability-scanner plugin.

jeremylongshore/tons-of-skills-marketplace

Retrieve CVE risk scores from NVD. An agent skill from transilienceai/communitytools.

transilienceai/communitytools

Threat-intel signal ingest — converts a CVE + affected-asset + claim payload into a queued engagement-scope row for the validation pipeline.

transilienceai/communitytools

Software Composition Analysis: find vulnerable dependencies, correlate CVE/GHSA/OSV across ecosystems, generate CycloneDX/SPDX SBOMs, assess license compliance, and run reachability-aware triage to…

hardw00t/ai-security-arsenal

Hunting skill for auth bypass vulnerabilities. An agent skill from elementalsouls/Claude-BugHunter.

elementalsouls/Claude-BugHunter

Hunting skill for sqli vulnerabilities. An agent skill from elementalsouls/Claude-BugHunter.

elementalsouls/Claude-BugHunter

Check for outdated or vulnerable dependencies. An agent skill from enuno/unifi-mcp-server.

enuno/unifi-mcp-server

Multi-source threat intelligence and vulnerability lookup. An agent skill from ptn1411/skill.

ptn1411/skill

Security engineering toolkit for threat modeling, vulnerability analysis, secure architecture, and penetration testing.

LeoYeAI/openclaw-master-skills

Audit a Node.js project's installed npm dependency tree for known CVEs by wrapping the npm audit JSON output and emitting findings in the canonical penetration-tester schema.

jeremylongshore/tons-of-skills-marketplace

Audit a Python project's installed dependencies for known CVEs by wrapping pip-audit (PyPA's official vulnerability auditor) and emitting findings in the canonical penetration-tester schema.

jeremylongshore/tons-of-skills-marketplace

Read findings JSONL files from cluster 1-4 skills, deduplicate by fingerprint, group by severity, and compose a deliverable- grade markdown vulnerability report with per-finding sections (title…

jeremylongshore/tons-of-skills-marketplace

Build a dependency-tree map of a project (npm or Python) and trace the path from each known-vulnerable transitive package back to one or more direct dependencies.

jeremylongshore/tons-of-skills-marketplace

Security review via Codex exec. An agent skill from sd0xdev/sd0x-harness.

sd0xdev/sd0x-harness

A skill your agent uses when asked to analyze, investigate, or report on honeypot server security.

SCStelz/security-investigator

Re-audit every past GHSA/CVE advisory published against this repository, anchored on each advisory's fix commit, for four failure modes, a regression of the original bug, a bypass of the fix, an…

alpha-omega-security/scrutineer

A skill your agent uses when the user says 'scan for secrets', 'check for leaked keys', 'secrets scanner', 'hardcoded credentials', 'API key leak', or needs to detect exposed secrets in source code.

cwinvestments/memstack

Clerk auth with API Keys beta (Dec 2025), Next.js 16 proxy.ts (March 2025 CVE context), API version 2025-11-10 breaking changes, clerkMiddleware() options, webhooks, production considerations (GCP…

LeoYeAI/openclaw-master-skills

Resolve Dependabot security alerts on owid/etl by upgrading vulnerable dependencies.

owid/etl

Security scanner for code, addresses, and transactions. An agent skill from alsk1992/CloddsBot.

alsk1992/CloddsBot

Inline orchestration workflow for security vulnerability detection and remediation with Beads integration.

maslennikov-ig/claude-code-orchestrator-kit

Per-language dependency vulnerability audit tool reference (cargo audit/deny, pip-audit, npm/pnpm audit, govulncheck, bundler-audit, composer audit, OWASP dependency-check, dotnet vulnerable…

Goldziher/ai-rulez

Run security audit — dependency vulnerabilities, secret scanning, OWASP pattern detection, HTTP headers.

Houseofmvps/ultraship

Pre-install security scanner for AI agent skills. An agent skill from sickn33/agentic-awesome-skills.

sickn33/agentic-awesome-skills

Drive responsible disclosure of a proven finding to a CVE. An agent skill from Encod3d-Sec/TORCH.

Encod3d-Sec/TORCH

Scan project dependencies for known vulnerabilities (CVEs). An agent skill from OWASP/secure-agent-playbook.

OWASP/secure-agent-playbook

Audit project dependencies for vulnerabilities, license risks, upgrade planning, and ecosystem health across multiple languages.

aAAaqwq/AGI-Super-Team

A skill your agent uses when assessing code quality hygiene — TypeScript strictness, lint violations, dead code, and duplication.

mizchi/skills

Scan repositories for newly disclosed CVEs in dependencies after a specific cutoff date.

ArabelaTso/Skills-4-SE

A skill your agent uses when auditing project dependencies for known vulnerabilities, supply chain risk, or provenance issues — covers Go modules, Maven/JVM, and CI integration for automated scanning

Habitat-Thinking/ai-literacy-superpowers

A skill your agent uses when auditing Docker images in this project for CVEs, base image staleness, or remediation recommendations — covers all four TUI images (Go, Python, Kotlin, C)

Habitat-Thinking/ai-literacy-superpowers

Usar antes de aceptar una dependencia nueva. An agent skill from 686f6c61/alfred-dev.

686f6c61/alfred-dev

Audit Hex deps for supply-chain security risk — bidi chars, compile-time exec, maintainer changes, typosquats, CVEs.

oliver-kriska/claude-elixir-phoenix

Prioritize and drive remediation of a vulnerability backlog by real risk, not raw CVSS — combining severity with exploitation signals (EPSS, CISA KEV), asset exposure and business context, using…

trilwu/secskills

Generate a CVE 5.x JSON document from an <tracker tracking issue, ready to paste into the Vulnogram source tab of the ASF CVE tool at https://cveprocess.apache.org/cve5/<CVE-IDsource.

apache/magpie

Remediate security findings by producing minimal, surgical code patches.

pproenca/dot-skills

Match the repository to a CVE Numbering Authority so disclosures route to the CNA's security contact when one covers the repo.

alpha-omega-security/scrutineer