“Security scanning”

对进入系统的文件或 URL 执行安全与合规扫描，输出 pass/reject 判定与扫描报告，作为所有文档处理的强制前置关卡。

Use for dependency audits (CVEs, outdated majors, paid licenses, bloat), secret scans, SAST, and container/filesystem scans.

Use when an agent folder must pass the Agentlas Cloud 2-stage security scan (static rules + BYOK LLM judgment) before private sync or public publish, or when…

Add security scanning to CI/CD with Strix — GitHub Actions, GitLab CI, or any pipeline — so every pull request gets a diff-scoped AI pentest that blocks…

DAST-first NightVision scan for an app you just built or changed.

信息安全分析师与软件开发工程师在搭建文档处理流水线时，当需要拦截违规文件或外部URL，请挂载此技能作为强制前置安检，自动输出 pass/reject 判定与详细合规扫描报告，一键守住零信任安全底线。

Evaluate IAM posture, public exposure, and security service status of the current AWS account.

Run an AWS Security Agent scan on the workspace — uploads the source to AWS, scans it with the managed Security Agent service, and returns ranked, verified…

Read-only security review of a public GitHub repository (leaked secrets, risky workflows, unpinned dependencies), reported with the file each finding comes…

Security layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.

Run a fast AWS Security Agent diff scan on only the changed code since a git ref.

MCP proxy adding security scanning, behavioral profiling, risk gating, and safe tool call execution.

Heuristic security scan of installed skills — prompt-injection phrases, hidden unicode instructions, credential-store access, network-pipe-to-shell and…

Claude Security: scan the codebase (the whole repository or a scoped part of it), scan changes (this branch's or a pull request's diff, or one commit), or…

A.I.G Scanner — AI security scanning for infrastructure, AI tools / skills, AI Agents, and LLM jailbreak evaluation via Tencent Zhuque Lab AI-Infra-Guard.

Deterministic security scanning, no model or API key, plus offline-verifiable proof a fix worked.

Run OpenAI's Codex Security methodology natively (vendored plugin; no Codex or OpenAI account): repo and diff security scans, threat models, finding…

Comprehensive developer workstation security audit — scans for exposed credentials, compromised application data, persistence mechanisms, and supply chain…

AI-powered security scanning using Black Duck Signal for vulnerability detection.

Specialist subagent: CI/CD security, SAST/DAST pipelines, supply chain security, container scanning, and security automation specialist.

Deterministic security scan of MCP servers, agent skills and npm/PyPI packages.

Runs a Semgrep security scan over a codebase: detects languages, selects rulesets, presents the plan for explicit approval, then runs every approved ruleset…

Scan agent skills for security issues.

Investigate and resolve existing Orbyn security findings, record evidence and add preventive checks without starting a security scan.