Security Scanning and Validation

Scheduling

Goal

Run the selected security checks, retain their native evidence, independently validate candidates, and report findings and coverage on the recorded source or deployment identity.

Intent signature

• Requests to scan a repository, agent skill package, MCP component, or web test deployment for vulnerabilities.
• Explicit Deepsec, Cisco Skill Scanner, Cisco MCP Scanner, Cisco AI Deep SAST, ARTEX, or Cloudflare security-audit-skill requests.
• Security scan setup, scoped PR/diff analysis, finding triage/reproduction, scanner failures, or security CI gates.

When to use

• Scan application source or a source diff; inspect skill packages or MCP components.
• Run a bounded runtime penetration test against a concrete authorized test deployment.
• Validate scanner candidates, retain evidence, or configure an engine-specific CI gate.
• Troubleshoot the selected scanner, credentials, coverage, matchers, quota, or resumable state.