vulnerability-scanner

name	vulnerability-scanner
description	Security vulnerability scanning for dependencies and code, with CVE database checking and risk assessment
allowed-tools	["Bash","Read","Write","Grep","Glob","Edit"]
graph	{"domains":["domain:software-engineering"],"specializations":["specialization:code-migration-modernization"],"skillAreas":["skill-area:vulnerability-management","skill-area:dependency-vulnerability-mgmt"],"roles":["role:security-engineer","role:vulnerability-scanner"],"workflows":["workflow:technical-debt-reduction"],"topics":["topic:refactoring"]}

Vulnerability Scanner Skill

Performs comprehensive security vulnerability scanning for dependencies and code, integrating with CVE databases and security platforms to identify, assess, and prioritize security risks for migration planning.

Purpose

Enable comprehensive security vulnerability detection for:

• CVE database checking for known vulnerabilities
• Severity assessment and prioritization
• Exploitability analysis
• Patch availability checking
• Transitive vulnerability chain mapping
• Risk scoring and remediation guidance

Capabilities

1. CVE Database Checking

• Query NVD (National Vulnerability Database)
• Check GitHub Advisory Database
• Query vendor-specific advisory databases
• Cross-reference multiple CVE sources
• Track CVE publication dates and updates

2. Severity Assessment