SkillsAdd

Source

vchirrav-eng/product-security-ai-skills

39 skills · 437 combined installs

Skills from this source

#
Skill
Source
8W Activity
Installs
1
network-scan-nmap Run Nmap for network discovery and security auditing. Performs port scanning, service detection, OS fingerprinting, a…
vchirrav-eng/product-security-ai-skills
61
2
dast-nuclei Run Nuclei template-based vulnerability scanner. Uses 8000+ community templates to detect CVEs, misconfigurations, ex…
vchirrav-eng/product-security-ai-skills
52
3
malware-scan-yara Run YARA rules for pattern-based malware identification. Scans files and directories against community and custom rul…
vchirrav-eng/product-security-ai-skills
19
4
secure-coding-audit Audit code for security vulnerabilities using OWASP Secure Coding rules from the local rules/ folder. Automatically s…
vchirrav-eng/product-security-ai-skills
14
5
dast-zap Run OWASP ZAP for Dynamic Application Security Testing. Performs baseline, full, or API scans against running web app…
vchirrav-eng/product-security-ai-skills
13
6
sca-npm-audit Run npm audit for Node.js dependency vulnerability scanning. Built-in SCA for npm projects with automatic fix suggest…
vchirrav-eng/product-security-ai-skills
12
7
api-security-spectral Run Spectral to lint OpenAPI and AsyncAPI specs for security issues. Validates API design for authentication, authori…
vchirrav-eng/product-security-ai-skills
10
8
secret-scan-gitleaks Run Gitleaks to detect hardcoded secrets in git repositories. Finds API keys, tokens, passwords, and credentials in c…
vchirrav-eng/product-security-ai-skills
10
9
secure-coding-generate Generate secure code following OWASP Secure Coding rules. Automatically detects the security domain and produces code…
vchirrav-eng/product-security-ai-skills
10
10
tls-scan-testssl Run testssl.sh to analyze TLS/SSL configurations. Checks cipher suites, protocols, certificate validity, known vulner…
vchirrav-eng/product-security-ai-skills
10
11
api-security-schemathesis Run Schemathesis for property-based API security testing. Generates test cases from OpenAPI/GraphQL schemas to find c…
vchirrav-eng/product-security-ai-skills
9
12
container-scan-trivy Run Trivy to scan container images for OS and library vulnerabilities, misconfigurations, and secrets. Comprehensive …
vchirrav-eng/product-security-ai-skills
9
13
iac-scan-kube-linter Run KubeLinter to lint Kubernetes YAML and Helm charts for security best practices. Checks pod security, resource lim…
vchirrav-eng/product-security-ai-skills
9
14
mobile-security-mobsf Run MobSF (Mobile Security Framework) for automated static and dynamic analysis of Android and iOS apps. Detects inse…
vchirrav-eng/product-security-ai-skills
9
15
sca-pip-audit Run pip-audit for Python dependency vulnerability scanning. Checks installed packages and requirements files against …
vchirrav-eng/product-security-ai-skills
9
16
secret-scan-trufflehog Run TruffleHog to detect secrets in git repos, filesystems, and S3 buckets. Uses verification to confirm if detected …
vchirrav-eng/product-security-ai-skills
9
17
cloud-security-prowler Run Prowler for comprehensive cloud security posture assessment. Audits AWS, Azure, and GCP against CIS Benchmarks, P…
vchirrav-eng/product-security-ai-skills
8
18
cloud-security-scoutsuite Run ScoutSuite for multi-cloud security auditing. Collects configuration data from AWS, Azure, GCP, Oracle, and Aliba…
vchirrav-eng/product-security-ai-skills
8
19
container-scan-dockle Run Dockle to audit container images against CIS Docker Benchmark and best practices. Checks for running as root, sen…
vchirrav-eng/product-security-ai-skills
8
20
container-scan-hadolint Run Hadolint to lint Dockerfiles for best practices and security issues. Validates against Docker and ShellCheck rule…
vchirrav-eng/product-security-ai-skills
8
21
dependency-confusion-detect Run Confused and GuardDog to detect dependency confusion and typosquatting risks. Checks if internal package names ex…
vchirrav-eng/product-security-ai-skills
8
22
iac-scan-checkov Run Checkov to scan Infrastructure as Code for misconfigurations. Supports Terraform, CloudFormation, Kubernetes, Hel…
vchirrav-eng/product-security-ai-skills
8
23
iac-scan-tfsec Run tfsec (now part of Trivy) to scan Terraform code for security misconfigurations. Deep HCL analysis with support f…
vchirrav-eng/product-security-ai-skills
8
24
license-scan-scancode Run ScanCode Toolkit for comprehensive license and copyright detection. Identifies license types, copyright holders, …
vchirrav-eng/product-security-ai-skills
8
25
sast-bandit Run Bandit SAST scans on Python code. Detects common security issues like SQL injection, hardcoded passwords, exec us…
vchirrav-eng/product-security-ai-skills
8
26
sast-psalm Run Psalm with taint analysis on PHP code. Detects SQL injection, XSS, command injection, path traversal, and other t…
vchirrav-eng/product-security-ai-skills
8
27
sast-spotbugs Run SpotBugs with Find Security Bugs plugin on Java code. Detects injection flaws, XXE, insecure crypto, SSRF, deseri…
vchirrav-eng/product-security-ai-skills
8
28
sca-grype Run Anchore Grype for SCA vulnerability scanning on filesystems and container images. Matches dependencies against mu…
vchirrav-eng/product-security-ai-skills
8
29
sca-osv-scanner Run Google's OSV-Scanner for Software Composition Analysis. Scans lockfiles and SBOMs across all major ecosystems (np…
vchirrav-eng/product-security-ai-skills
8
30
semgrep-sast-scan Run Semgrep SAST (Static Application Security Testing) scans on source code using the Semgrep AppSec Platform cloud i…
vchirrav-eng/product-security-ai-skills
8
31
semgrep-secret-scan Run Semgrep Secrets scanning to detect leaked credentials, API keys, passwords, and access tokens in source code. Use…
vchirrav-eng/product-security-ai-skills
8
32
sast-brakeman Run Brakeman SAST scans on Ruby on Rails applications. Detects SQL injection, XSS, mass assignment, CSRF, command inj…
vchirrav-eng/product-security-ai-skills
7
33
sast-cargo-audit Run cargo-audit and cargo-geiger on Rust code. Audits dependencies for known vulnerabilities and detects unsafe code …
vchirrav-eng/product-security-ai-skills
7
34
sast-detekt Run detekt static analysis on Kotlin code with security-focused rules. Detects hardcoded secrets, insecure crypto, an…
vchirrav-eng/product-security-ai-skills
7
35
sast-eslint-security Run ESLint with security plugins on JavaScript/TypeScript code. Detects eval usage, non-literal RegExp, prototype pol…
vchirrav-eng/product-security-ai-skills
7
36
sast-flawfinder Run Flawfinder SAST scans on C/C++ code. Detects buffer overflows, format string vulnerabilities, race conditions, an…
vchirrav-eng/product-security-ai-skills
7
37
sast-gosec Run gosec SAST scans on Go code. Detects SQL injection, hardcoded credentials, insecure TLS, command injection, and o…
vchirrav-eng/product-security-ai-skills
7
38
sbom-syft Run Syft to generate Software Bill of Materials (SBOM) from container images and filesystems. Outputs CycloneDX or SP…
vchirrav-eng/product-security-ai-skills
7
39
semgrep-sast-scan Run Semgrep SAST (Static Application Security Testing) scans on source code using the Semgrep AppSec Platform cloud i…
vchirrav-eng/product-security-ai-skills
3