ghost-scan-code

# Find Issues You find security issues in a repository. This skill plans which vulnerability vectors to scan, then executes those scans against each project. ## Inputs - **depth**: `quick` (default), `balanced`, or `full` — override via `$ARGUMENTS` $ARGUMENTS > **Note:** Arguments passed can be used to customize the scan workflow if provided. For example, if the user specifies a specific set of vectors, count of vectors, specific candidate files, areas to focus on, count of candidate files, etc., ensure the relevant details are passed to the relevant steps in the skill. ## Supporting files - Loop script: [scripts/loop.sh](scripts/loop.sh) - Scan criteria: [criteria/index.yaml](criteria/index.yaml) --- ## Step 1: Setup Compute the repo-specific output directory: ```bash repo_name=$(basename "$(pwd)") && remote_url=$(git remote get-url origin 2>/dev/null || pwd) && short_hash=$(printf '%s' "$remote_url" | git hash-object --stdin | cut -c1-8) && repo_id="${repo_name}-${short_hash}" && short_sha=$(git rev-parse --short HEAD 2>/dev/null || date +%Y%m%d) && ghost_repo_dir="$HOME/.ghost/repos/${repo_id}" && scan_dir="${ghost_repo_dir}/scans/${short_sha}/code" && cache_dir="${ghost_repo_dir}/cache" && mkdir -p "$scan_dir" && echo "scan_dir=$scan_dir cache_dir=$cache_dir" ``` 1. Read `$cache_dir/repo.md` — if missing, run the repo-context skill first and then continue. 2. Read [criteria/index.yaml](criteria/index.yaml) to get the valid agent→vector mappings per project typ...