oma-deepsec - Drive Deepsec vulnerability scanning workflows
Operates Vercel’s deepsec scanner to initialize workspaces, run scans and finding workflows, gate pull requests, create matchers, and export results.
Tags
Updated: 2026-10-15vulnerability scanningapplication securityCI security gatessecurity findingscustom matchersVercel deepsec
Capabilities
Typical Inputs
What this skill does
- Initialize the .deepsec workspace
- Write project-specific INFO.md
- Run scan and process passes
- Triage and revalidate findings
- Gate pull requests in CI
- Create custom matchers
- Export vulnerability findings
- Estimate and control scan costs
Inputs
- Target repository root
- Operation intent
- Credential mode
- Agent choice
- Severity floor
- Existing deepsec data
- Deepsec configuration
- Custom matchers
- CI provider
Outputs
- Registered .deepsec workspace
- Populated INFO.md file
- Completed scan and processing runs
- CI workflow file
- Custom matcher files
- Findings export files
- Severity and false-positive summary
- Cost and time report
Requirements
- Node.js 22 or newer
- Supported package manager
- Working AI credential
- Git repository
- Vercel Sandbox authentication for distributed runs
