Slash Command

/scan

Scans current codebase for security vulnerabilities via SAST, dependency CVEs (npm/pip/composer), and config issues. Outputs structured report with severity ratings, findings, and remediation steps.

JavaScript

Python

PHP

security

npx claudepluginhub jeremylongshore/claude-code-plugins-plus-skills --plugin vulnerability-scanner

Popularity

Parent stars

2,199

Parent forks

296

Shared by

Invocation

How this command is triggered — by the user, by Claude, or both

Slash command

/vulnerability-scanner:scan

Model invocable

No pre-commands

Context Preview

The summary Claude sees in its command listing — used to decide when to auto-load this command

# Vulnerability Scanner

Perform comprehensive vulnerability scanning on the current codebase to identify security issues, CVEs, and potential attack vectors.

## Scan Process

1. **Code Analysis (SAST)**
   - Scan for common vulnerability patterns
   - Identify insecure code practices
   - Check for hardcoded secrets
   - Analyze authentication/authorization flaws

2. **Dependency Scanning**
   - Check npm/pip/composer dependencies for known CVEs
   - Identify outdated packages with security patches
   - Report transitive dependency vulnerabilities

3. **Configuration Review**
   - Analyze...

Command Content

49 lines · ~374 tokens

Other plugins with /scan

/security-scan

Scans codebase for exposed secrets, dependency CVEs, and SAST issues like SQLi/XSS. Produces report with findings table, severities, and upgrade recommendations.

code-quality-orchestrator

/security-scan

1.4k

Scans codebase for hardcoded secrets, vulnerable dependencies, common vulnerabilities like injections and XSS, and config issues, producing a structured security report with remediation steps.

project-starter

/security-check

1.7k

Performs security assessment of codebase: scans vulnerability patterns, auth/authz, data handling, deps, config; reports findings with CVSS severity counts.

security-guidance

/scan

Scans codebase for security vulnerabilities, hardcoded secrets, insecure patterns, and web security headers. Generates Markdown report with issues, code snippets, and remediation examples.

aura-frog

/security-scan

1.7k

Scans codebase for OWASP Top 10 vulnerabilities and common security patterns. Defaults to entire project or limits to specified path.

code-guardian

/audit

1.7k

Performs security audit of codebase for dependency vulnerabilities, secrets, OWASP Top 10, input validation, auth issues, and misconfigs. Outputs findings report by severity with fixes and references.

claude-code-toolkit

Stats

LanguagePython

Parent stars2,199

Parent forks296

MaintenanceExcellent

Last CommitApr 3, 2026

Actions

View Source View Plugin View on GitHub View README

Help us improve

Share bugs, ideas, or general feedback.

Stats

Actions

Help us improve

Share bugs, ideas, or general feedback.

# Vulnerability Scanner Perform comprehensive vulnerability scanning on the current codebase to identify security issues, CVEs, and potential attack vectors. ## Scan Process 1. **Code Analysis (SAST)** - Scan for common vulnerability patterns - Identify insecure code practices - Check for hardcoded secrets - Analyze authentication/authorization flaws 2. **Dependency Scanning** - Check npm/pip/composer dependencies for known CVEs - Identify outdated packages with security patches - Report transitive dependency vulnerabilities 3. **Configuration Review** - Analyze...

Vulnerability Scanner

Perform comprehensive vulnerability scanning on the current codebase to identify security issues, CVEs, and potential attack vectors.

Scan Process

Code Analysis (SAST)

Scan for common vulnerability patterns
Identify insecure code practices
Check for hardcoded secrets
Analyze authentication/authorization flaws

Dependency Scanning

Check npm/pip/composer dependencies for known CVEs
Identify outdated packages with security patches
Report transitive dependency vulnerabilities

Configuration Review

Analyze security-sensitive configurations
Check for insecure defaults
Validate SSL/TLS settings
Review access control configurations

Report Generation

Severity-based categorization (Critical, High, Medium, Low)
CVE identifiers and CVSS scores
Remediation recommendations
Affected files and line numbers

Output Format

Generate a structured vulnerability report with:

Executive summary with vulnerability counts by severity

Detailed findings with code snippets

Remediation steps for each vulnerability

Links to CVE databases and security advisories

Security Best Practices

Never expose vulnerability details in public repositories

Prioritize Critical and High severity issues

Retest after applying fixes

Document false positives for future scans

Vulnerability Scanner

Perform comprehensive vulnerability scanning on the current codebase to identify security issues, CVEs, and potential attack vectors.

Scan Process

Code Analysis (SAST)
- Scan for common vulnerability patterns
- Identify insecure code practices
- Check for hardcoded secrets
- Analyze authentication/authorization flaws
Dependency Scanning
- Check npm/pip/composer dependencies for known CVEs
- Identify outdated packages with security patches
- Report transitive dependency vulnerabilities
Configuration Review
- Analyze security-sensitive configurations
- Check for insecure defaults
- Validate SSL/TLS settings
- Review access control configurations
Report Generation
- Severity-based categorization (Critical, High, Medium, Low)
- CVE identifiers and CVSS scores
- Remediation recommendations
- Affected files and line numbers

Output Format

Generate a structured vulnerability report with:

Executive summary with vulnerability counts by severity
Detailed findings with code snippets
Remediation steps for each vulnerability
Links to CVE databases and security advisories

Security Best Practices

Never expose vulnerability details in public repositories
Prioritize Critical and High severity issues
Retest after applying fixes
Document false positives for future scans

/scan

Popularity

Invocation

Context Preview

Command Content

Other plugins with /scan

Help us improve

Help us improve

Find plugins for your project

/scan

Popularity

Invocation

Context Preview

Command Content

Vulnerability Scanner

Scan Process

Output Format

Security Best Practices

Other plugins with /scan

Help us improve

Vulnerability Scanner

Scan Process

Output Format

Security Best Practices