security-scanner

Run security scans including SAST, dependency scanning, and secret detection

不碰外部（只输出文字）无严重或高危命中a5c-ai/babysitter

它会碰到什么

扫了多少2 个文本文件，4 KB

它会碰到什么不碰外部（只输出文字）

命中总数0 处

命中统计严重 0 · 高 0 · 中 0 · 低 0

这一栏是扫描器报的事实，不是结论。命中多不等于有毒（安全工具、规则库、示例脚本本来就会包含危险写法），命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系，需要你自己看。

技能内容

Security Scanner Skill

Overview

Runs comprehensive security scans including SAST scanning with Semgrep/CodeQL, dependency vulnerability scanning with Snyk/OWASP, secret detection, and container image scanning.

Capabilities

SAST scanning (Semgrep, CodeQL)
Dependency vulnerability scanning (Snyk, OWASP Dependency-Check)
Secret detection (git-secrets, truffleHog, gitleaks)
Container image scanning (Trivy, Grype)
License compliance checking
SBOM generation
CVE database lookup

Target Processes

security-architecture-review
iac-review

Input Schema

{
  "type": "object",
  "required": ["targets"],
  "properties": {
    "targets": {
      "type": "array",
      "items": { "type": "string" },
      "description": "Paths to scan"
    },
    "scanTypes": {
      "type": "array",
      "items": {
        "type": "string",
        "enum": ["sast", "dependencies", "secrets", "containers", "licenses"]
      },
      "default": ["sast", "dependencies", "secrets"]
    },
    "tools": {
      "type": "object",
      "properties": {
        "sast": {
          "type": "string",
          "enum": ["semgrep", "codeql"],
          "default": "semgrep"
        },
        "dependencies": {
          "type": "string",
          "enum": ["snyk", "owasp", "npm-audit"],
          "default": "snyk"
        },
        "secrets": {
          "type": "string",
          "enum": ["gitleaks", "trufflehog"],
          "default": "gitleaks"
        }
      }
    },
    "options": {
      "type": "object",
      "properties": {
        "severityThreshold": {
          "type": "string",
          "enum": ["critical", "high", "medium", "low"],
          "default": "medium"
        },
        "failOnVulnerability": {
          "type": "boolean",
          "default": true
        }
      }
    }
  }
}

Output Schema

{
  "type": "object",
  "properties": {
    "vulnerabilities": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "id": { "type": "string" },
          "severity": { "type": "string" },
          "type": { "type": "string" },
          "file": { "type": "string" },
          "line": { "type": "number" },
          "description": { "type": "string" },
          "cve": { "type": "string" },
          "fix": { "type": "string" }
        }
      }
    },
    "secrets": {
      "type": "array"
    },
    "dependencyVulnerabilities": {
      "type": "array"
    },
    "summary": {
      "type": "object",
      "properties": {
        "critical": { "type": "number" },
        "high": { "type": "number" },
        "medium": { "type": "number" },
        "low": { "type": "number" }
      }
    },
    "passed": {
      "type": "boolean"
    }
  }
}

Usage Example

{
  kind: 'skill',
  skill: {
    name: 'security-scanner',
    context: {
      targets: ['src/**/*.ts', 'package.json'],
      scanTypes: ['sast', 'dependencies', 'secrets'],
      tools: {
        sast: 'semgrep',
        dependencies: 'snyk'
      },
      options: {
        severityThreshold: 'high',
        failOnVulnerability: true
      }
    }
  }
}

想直接用这个技能？

本站把开放许可（MIT / Apache 等）的技能按仓库打包整理到网盘，点一下转存到你自己的网盘，不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接，不打包。

去原始仓库

它属于哪个仓库

仓库a5c-ai/babysitter

星标★ 1,796

本站分层T1

该仓技能数2115

原文件路径library/specializations/software-architecture/skills/security-scanner/SKILL.md

同一个仓库里的其他技能

看这个仓库的全部 2115 个技能