orbitant-owasp-scan

Overview

Static security scan for Node.js and Python repos. Finds OWASP Top 10 patterns detectable without running the code. Reports findings with file locations and actionable recommendations.

P0 findings (hardcoded secrets, code injection) surface at the top before any section breakdown.

When to Use

• Before starting work on a client project
• During code review of security-sensitive areas
• Assessing security posture of an unfamiliar repo
• Running a section audit after /orbitant-engineering:ground-control flagged OWASP issues

How to Run