0-Day Vulnerability Scanner Skill

Purpose

Analyze code changes (commits, PRs, files) for potential zero-day security vulnerabilities using LLM-powered analysis. This skill provides conversational access to the 0-Day Scanner Agent with real-time token monitoring and knowledge graph integration.

Stack-aware fallback (when MCP unavailable): if analyze_for_zero_day_vulnerabilities is not reachable, detect the changed files' language(s) and load the matching reference pack from ../security-reviewer/languages/{python,javascript-typescript,go,java,rust,ruby,dotnet}.md to drive a diff-only review using the assistant's built-in tools. Apply the 8-point check from ../security-reviewer/SKILL.md scoped to the diff.

When to Use

• User asks to "scan for vulnerabilities" or "check for security issues"
• User mentions "0-day", "zero-day", or "security analysis"
• User wants to analyze a specific commit, PR, or file for security
• User requests vulnerability assessment during code review

Workflow