Code-VulnScan — Deep Codebase Vulnerability Scanner

This skill performs comprehensive, flow-aware security analysis on any codebase. It combines taint tracking, control-flow analysis, business logic review, API security auditing, secret detection, configuration review, and dependency auditing to find real, exploitable vulnerabilities — not keyword matches.

• Use the IDE's own tools for reading, searching, and reasoning about code.
• Use local Python scripts for deterministic file enumeration, AST-based analysis, secret entropy scanning, dependency checking, state tracking, and report generation.
• Do not call external LLM-provider APIs as part of this skill.
• Every confirmed finding requires a verified evidence chain. Candidates without verification are never reported.

Command surface