scanning-for-vulnerabilities
について
このスキルは、脆弱性スキャナープラグインを使用してコードベースの包括的なセキュリティスキャンを可能にします。コード、依存関係、設定における脆弱性を特定し、CVE検出も含みます。開発中にセキュリティリスクを自動的にスキャンする必要がある場合にご利用ください。
クイックインストール
Claude Code
推奨/plugin add https://github.com/jeremylongshore/claude-code-plugins-plusgit clone https://github.com/jeremylongshore/claude-code-plugins-plus.git ~/.claude/skills/scanning-for-vulnerabilitiesこのコマンドをClaude Codeにコピー＆ペーストしてスキルをインストールします
ドキュメント
Overview
This skill empowers Claude to automatically scan your codebase for security vulnerabilities. It leverages the vulnerability-scanner plugin to identify potential risks, including code-level flaws, vulnerable dependencies, and insecure configurations.
How It Works
- Initiate Scan: The skill activates the vulnerability-scanner plugin based on user input.
- Perform Analysis: The plugin scans the codebase, dependencies, and configurations for vulnerabilities, including CVE detection.
- Generate Report: The plugin creates a detailed vulnerability report with findings, severity levels, and remediation guidance.
When to Use This Skill
This skill activates when you need to:
- Identify security vulnerabilities in your code.
- Check your project's dependencies for known CVEs.
- Review your project's configurations for security weaknesses.
Examples
Example 1: Identifying SQL Injection Risks
User request: "Scan my code for SQL injection vulnerabilities."
The skill will:
- Activate the vulnerability-scanner plugin.
- Analyze the codebase for potential SQL injection flaws.
- Generate a report highlighting any identified SQL injection risks and providing remediation steps.
Example 2: Checking for Vulnerable npm Packages
User request: "Check my project's npm dependencies for known vulnerabilities."
The skill will:
- Activate the vulnerability-scanner plugin.
- Scan the project's
package.jsonfile and identify any npm packages with known CVEs. - Generate a report listing the vulnerable packages, their CVE identifiers, and recommended updates.
Best Practices
- Regular Scanning: Run vulnerability scans regularly, especially before deployments.
- Prioritize Remediation: Focus on addressing critical and high-severity vulnerabilities first.
- Validate Fixes: After applying fixes, run another scan to ensure the vulnerabilities are resolved.
Integration
This skill integrates with the core Claude Code environment by providing automated vulnerability scanning capabilities. It can be used in conjunction with other plugins to create a comprehensive security workflow, such as integrating with a ticketing system to automatically create tickets for identified vulnerabilities.
GitHub リポジトリ
関連スキル
algorithmic-art
メタThis Claude Skill creates original algorithmic art using p5.js with seeded randomness and interactive parameters. It generates .md files for algorithmic philosophies, plus .html and .js files for interactive generative art implementations. Use it when developers need to create flow fields, particle systems, or other computational art while avoiding copyright issues.
subagent-driven-development
開発This skill executes implementation plans by dispatching a fresh subagent for each independent task, with code review between tasks. It enables fast iteration while maintaining quality gates through this review process. Use it when working on mostly independent tasks within the same session to ensure continuous progress with built-in quality checks.
executing-plans
デザインUse the executing-plans skill when you have a complete implementation plan to execute in controlled batches with review checkpoints. It loads and critically reviews the plan, then executes tasks in small batches (default 3 tasks) while reporting progress between each batch for architect review. This ensures systematic implementation with built-in quality control checkpoints.
cost-optimization
その他This Claude Skill helps developers optimize cloud costs through resource rightsizing, tagging strategies, and spending analysis. It provides a framework for reducing cloud expenses and implementing cost governance across AWS, Azure, and GCP. Use it when you need to analyze infrastructure costs, right-size resources, or meet budget constraints.