Security Vulnerability Health Check

Input

Use the entire codebase as the context for this skill. Focus on source code, dependency manifests, package lock files, configuration files, infrastructure files, authentication code, authorization code, API endpoints, data access code, logging, secrets handling, and external integrations.

Exclude .md files, .gitignore files, generated files, build output, package caches, binaries, images, and other non-code files unless they are directly needed to evaluate security risk.

Scope

Perform only step 3 from healthcheck-full:

• Analyze the code for security vulnerabilities using static code analysis techniques.
• Match identified vulnerabilities with known CVEs where possible.
• Provide a CVE database link for each matched vulnerability.
• Assign a risk level of low, medium, or high for each vulnerability.

Do not perform LOC counting, general MFA review, general code quality review, dead code detection, dependency freshness review, or external access analysis unless those findings directly contribute to a security vulnerability.