Security Scanning
Scans code changes for common security issues before they ship.
Before & after
Same prompt, same agent — the only difference is the skill.
Code security is important before deployment. Common issues to watch for include injection vulnerabilities, authentication problems, and unsafe data handling. You'd want to review input validation, check authorization logic, and verify that sensitive data isn't being logged or stored improperly. SQL injection and cross-site scripting are frequent concerns. You should also check for hardcoded secrets. Would you like me to review a specific file or section of code?
SECURITY SCAN RESULTS
SEVERITY: HIGH
Issue: SQL query concatenation on line 47
Code: const query = 'SELECT * FROM users WHERE id = ' + userId;
Fix: Use parameterized queries—const query = 'SELECT * FROM users WHERE id = $1';
CVE Class: SQL Injection
SEVERITY: MEDIUM
Issue: Auth token stored in localStorage (line 23)
Code: localStorage.setItem('token', jwtToken);
Fix: Use httpOnly cookie instead; localStorage is vulnerable to XSS
CVE Class: Cross-Site Scripting
SEVERITY: MEDIUM
Issue: API key visible in error logs (line 15)
Code: console.error('API key: ' + process.env.STRIPE_KEY);
Fix: Never log secrets; use redaction middleware
CVE Class: Information Disclosure
SEVERITY: LOW
Issue: Missing input validation on email field
Fix: Add email regex check or use validator library
SCAN COMPLETE: 4 issues found. 3 require fix before merge.About this skill
name: security-scanning description: Use when Scans code changes for common security issues before they ship.
Security Scanning
Security Scanning is a skill from the plugin collection that reviews code for common vulnerability patterns, covering injection risks, auth issues, and unsafe data handling, before a change is merged.
What you get
- A structured security review pass over the current diff or codebase.
Customize your output
- Adjust which vulnerability classes it checks for.
Example output
A flagged list of potential security issues with suggested fixes.
Best for
Teams shipping AI-generated code who want a security pass before merge.
SKILL.md preview
---
name: security-scanning
description: Use this skill to scan code changes for common security issues such as injection risks, auth flaws, and unsafe data handling before a change is merged.
version: 1.0.0
category: Development / Security
author: AgentVolt
license: proprietary
tags:
- development
- security
- standard
---
# Security Scanning
Reviews code changes for common vulnerability patterns before merge, covering injection risks, authentication and authorization gaps, and unsafe data handling.
## When to use
… (sign up to view the full skill)More development skills
View all Development skills →Secure Code Guardian
Implements authentication, authorization, and input validation with concrete secure defaults, preventing OWASP Top 10 vulnerabilities in new code.
Security Reviewer
Identifies security vulnerabilities, generates structured audit reports with severity ratings, and provides actionable remediation guidance.
Fullstack Guardian
Builds security-focused full-stack web applications by implementing integrated frontend and backend components with layered security at every level.
Trail of Bits Security Skill
Audits your code for security issues before you ship, using Trail of Bits' professional security review methodology.