Web Dependency Security Scanning Skill

This skill provides expert guidance for scanning deployed websites to identify outdated dependencies, known vulnerabilities (CVEs), insecure configurations, and missing security controls.

When to Use This Skill

Invoke this skill when:

• Scanning a deployed website for outdated libraries and frameworks
• Identifying CVEs in frontend dependencies (jQuery, React, Vue, Bootstrap, etc.)
• Detecting CMS versions and known vulnerabilities (WordPress, Drupal, Umbraco, Sitecore, etc.)
• Auditing HTTP security headers and configurations
• Performing third-party website security assessments
• Conducting pre-acquisition technical due diligence
• Analyzing supply chain security risks in web applications
• Evaluating client-side dependency security without source code access

Required Tools

🚨 CRITICAL: Tool Requirements for Website Scanning 🚨