security-scan

This skill automates security auditing and vulnerability scanning for Magento 2 applications.

What This Skill Does

1. Dependency Vulnerability Scan

   • Scan composer dependencies for known CVEs
   • Check for outdated Magento core version
   • Identify vulnerable third-party modules
   • Review security patch status
   • Validate PHP version security support

2. Configuration Security Audit

   • Admin panel security settings
   • Two-factor authentication status
   • Session configuration and timeout
   • Cookie security settings
   • HTTPS enforcement validation
   • Secret key usage in admin URLs