“Security scanning”

Use for dependency audits (CVEs, outdated majors, paid licenses, bloat), secret scans, SAST, and container/filesystem scans.

Use when an agent folder must pass the Agentlas Cloud 2-stage security scan (static rules + BYOK LLM judgment) before private sync or public publish, or when…

Add security scanning to CI/CD with Strix — GitHub Actions, GitLab CI, or any pipeline — so every pull request gets a diff-scoped AI pentest that blocks…

DAST-first NightVision scan for an app you just built or changed.

Evaluate IAM posture, public exposure, and security service status of the current AWS account.

Run an AWS Security Agent scan on the workspace — uploads the source to AWS, scans it with the managed Security Agent service, and returns ranked, verified…

Run a fast AWS Security Agent diff scan on only the changed code since a git ref.

A.I.G Scanner — AI security scanning for infrastructure, AI tools / skills, AI Agents, and LLM jailbreak evaluation via Tencent Zhuque Lab AI-Infra-Guard.

Run OpenAI's Codex Security methodology natively (vendored plugin; no Codex or OpenAI account): repo and diff security scans, threat models, finding…

Comprehensive developer workstation security audit — scans for exposed credentials, compromised application data, persistence mechanisms, and supply chain…

Specialist subagent: CI/CD security, SAST/DAST pipelines, supply chain security, container scanning, and security automation specialist.

Runs a Semgrep security scan over a codebase: detects languages, selects rulesets, presents the plan for explicit approval, then runs every approved ruleset…

Scan agent skills for security issues.

Investigate and resolve existing Orbyn security findings, record evidence and add preventive checks without starting a security scan.

Scan installed plugins and skills for security risks including malicious code AND malicious natural language instructions.

Runs security audits on codebases — full scans, diff reviews, threat models, vulnerability triage, remediation guidance, and finding tracking.

Use when security verification is needed - pre-commit security checks, vulnerability scanning, STRIDE threat analysis.

Fetch all of the repository's open GitHub security alerts (Dependabot, code scanning, secret scanning, and repository security advisories), trace each to its…

Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis.

Scans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities — chain halts, fund loss, state divergence.

Scan the working tree or a diff for hardcoded secrets (API keys, tokens, private keys, passwords).

Scan code for security issues: dependency vulnerabilities (npm/pip audit), secret leaks (regex and entropy analysis), and OWASP anti-patterns like SQL…

Scan an iOS/macOS Xcode project for common App Store rejection patterns before submission.

Pre-commit verification pipeline — static security scan, baseline-aware quality gates, independent reviewer subagent, and auto-fix loop.