security-scanning - Automated Security Scanning for Dependencies and Code
Automated vulnerability detection in code and dependencies using security scanning tools
Tags
Updated: 2026-03-09Capabilities
Typical Inputs
Typical Outputs
What this skill does
- run npm audit
- run pip-audit
- run Semgrep scan
- detect secrets
- scan containers
- run pre-commit hooks
- integrate with CI/CD
Inputs
- code repository
- package.json
- requirements.txt
- Dockerfile
- CI/CD configuration
- security rules
Outputs
- security audit report
- vulnerability count
- secret detection results
- scan results file
- CI/CD pipeline status
Requirements
- npm or pip package manager
- Semgrep CLI
- secret detection tools
- pre-commit framework
- CI/CD system access