Is it possible to export scan results for external tools?

Yes, the skill can generate reports in HTML for human review, JSON for data processing, and SARIF for integration with platforms like GitHub Security.

Does it provide remediation advice for found vulnerabilities?

Yes, the skill includes specialized remediation templates to guide you through fixing common security issues and safely upgrading vulnerable dependencies.

Can this skill find leaked API keys and AWS tokens?

Yes, it uses over 100 regex patterns to identify exposed secrets, tokens, and private keys in your codebase and git history.

Which programming languages does this skill support for scanning?

It supports major ecosystems including JavaScript, TypeScript, Python, Go, Rust, and Java by checking their respective package managers and source code patterns.

Can I use this for web application security validation?

Absolutely. It includes specific tools for validating HTTP security headers and checking for OWASP Top 10 vulnerabilities like XSS, SQL injection, and SSRF.

Security Scanning & Audit Patterns

Name: Security Scanning & Audit Patterns
Author: vanman2024

byvanman2024

0•

Security & Testing

Automates comprehensive security vulnerability scanning, secret detection, and OWASP compliance auditing for multi-language codebases.

This skill equips Claude with specialized patterns and scripts to perform deep security audits across various development environments. It enables automated detection of exposed secrets, identification of vulnerable dependencies across multiple package managers (npm, pip, cargo, etc.), and scanning for OWASP Top 10 risks. By providing actionable remediation guidance and professional reporting tools in formats like HTML and SARIF, it helps developers secure their infrastructure, validate HTTP headers, and maintain a robust security posture throughout the software development lifecycle.

Key Features

01OWASP Top 10 pattern identification including injection and access control flaws

02Automated security report generation in HTML, JSON, and SARIF formats

03Comprehensive secret and credential detection across 100+ sensitive patterns

04Multi-language dependency vulnerability auditing for npm, pip, cargo, and Maven

050 GitHub stars

06HTTP security header validation with specific configuration recommendations

Use Cases

01Integrating automated security scanning into CI/CD pipelines for continuous monitoring

02Performing pre-release security audits to identify vulnerabilities and hardcoded secrets

03Validating web application security headers and OWASP compliance during development

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add vanman2024/dev-lifecycle-marketplace security-patterns

For use in Claude.ai and ChatGPT

Download Skill