scan
Installation
SKILL.md
Security Scan Assistant | 安全掃描助手
Automate security scanning for dependencies, secrets, and license compliance.
自動化相依套件、機密資訊和授權合規的安全掃描。
Scan Types | 掃描類型
| Type | Tool Examples | Purpose | 用途 |
|---|---|---|---|
| Dependency audit | npm audit, pip-audit, Snyk | Find known CVEs in dependencies | 檢測相依套件已知 CVE |
| Secret detection | gitleaks, trufflehog | Find leaked credentials in code | 偵測程式碼中洩漏的憑證 |
| License compliance | license-checker, SPDX | Verify OSS license compatibility | 驗證開源授權相容性 |
| SAST | Semgrep, CodeQL | Static analysis for code patterns | 靜態分析程式碼模式 |