Security Scanner

Comprehensive security analysis detecting hardcoded secrets, SQL injection, XSS, insecure dependencies, and OWASP Top 10 vulnerabilities.

What This Skill Does

• Scans for hardcoded secrets (API keys, passwords, tokens)
• Detects SQL injection vulnerabilities
• Finds XSS attack vectors
• Checks insecure dependencies
• Identifies authentication/authorization flaws
• Reviews CORS and CSP configurations
• Checks for insecure cryptography

Instructions

Phase 1: Secret Detection

Search for common secret patterns: