code-vulnscanlisted

Use this when the user wants to find security vulnerabilities in a codebase, perform a security audit, scan for CVEs, detect secrets, review React/Next.js, Go, Java/Kotlin JVM, PHP, Ruby, .NET, or Rust web services, audit architecture/application/infrastructure flaws, review auth/API/crypto/business logic, check IaC/cloud/runtime configs, or generate a vulnerability report. Performs taint-flow, control-flow, architecture, and exploitability analysis across Python, JS/TS, Java/Kotlin, Go, PHP, Ruby, C/C++, C#, Rust, and infrastructure.
Bhanunamikaze/Code-VulnScan-Skill · ★ 5 · DevOps & Infrastructure · score 75

Install: claude install-skill Bhanunamikaze/Code-VulnScan-Skill

# Code-VulnScan — Deep Codebase Vulnerability Scanner This skill performs comprehensive, flow-aware security analysis on any codebase. It combines taint tracking, control-flow analysis, business logic review, API security auditing, secret detection, configuration review, and dependency auditing to find real, exploitable vulnerabilities — not keyword matches. - Use the IDE's own tools for reading, searching, and reasoning about code. - Use local Python scripts for deterministic file enumeration, AST-based analysis, secret entropy scanning, dependency checking, state tracking, and report generation. - Do not call external LLM-provider APIs as part of this skill. - Every confirmed finding requires a verified evidence chain. Candidates without verification are never reported. ## Command surface - `vulnscan scan <path> [--lang python,javascript,...] [--severity critical,high,medium,low] [--exclude vendor,tests]` - `vulnscan taint <file> [--lang <language>]` - `vulnscan secrets <path>` - `vulnscan deps <path>` - `vulnscan config <path>` - `vulnscan report [--run-id <id>] [--format markdown|html|json|sarif|all] [--min-severity medium]` - `vulnscan status` - `vulnscan commit <hash> [--repo <path>] [--base <base-hash>] [--severity critical,high,medium,low]` - `vulnscan diff <base> <head> [--repo <path>] [--severity critical,high,medium,low]` - `vulnscan pr <pr-number> [--repo <path>] [--severity critical,high,medium,low]` **Commit/diff mode:** Scans only the files and code region