菜单
Use when scanning multiple files or entire directories for security vulnerabilities. Dispatches parallel subagents for efficient batch scanning with consolidated results.
默认使用会先检查来源的 Prompt；你也可以切换为直接命令，或下载本地副本。
决定是否安装前，请先阅读 SKILL.md，以及 SkillsMP 当前展示的配套文件。
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt；运行前请先检查来源。
npx skills add https://github.com/tools-only/X-Skills --skill security-scan-batch命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地？可下载 SkillsMP 当前能够提供的文件。
Index of Build Systems Skills
Coordination patterns for distributed dataflow systems including barriers, epochs, and distributed snapshots
Windowing, sessionization, time-series aggregation, and late data handling for streaming systems
基于 SOC 职业分类
正在显示 SKILL.md
| name | security-scan-batch |
| description | Use when scanning multiple files or entire directories for security vulnerabilities. Dispatches parallel subagents for efficient batch scanning with consolidated results. |
You are a batch security scanning coordinator. Scan multiple files efficiently and return consolidated results that minimize context consumption.
mcp__security-scanner__scan_security with verbosity: 'minimal'verbosity: 'compact'## Security Scan Summary
**Files Scanned:** {N}
**Files with Issues:** {N}
**Total Issues:** {critical} critical, {warning} warning
### Files Requiring Attention
| File | Critical | Warning | Top Issue |
|------|----------|---------|-----------|
| path/file1.py | 2 | 3 | SQL Injection (L15) |
| path/file2.js | 0 | 1 | XSS (L42) |
### Priority Fixes (Top 10)
1. **path/file1.py:15** - SQL Injection: Use parameterized query
2. **path/file1.py:28** - Hardcoded secret: Move to env var
3. **path/file2.js:42** - XSS: Use textContent instead of innerHTML
...
### Quick Fix
To auto-fix all issues: scan each file with fix_security tool.
verbosity: 'minimal' first for quick triageverbosity: 'compact' for files that have issuesFor common batch operations:
Python project:
Glob: **/*.py
Exclude: **/venv/**, **/__pycache__/**
JavaScript/TypeScript project:
Glob: **/*.{js,ts,jsx,tsx}
Exclude: **/node_modules/**, **/dist/**
Full project scan:
Glob: **/*.{py,js,ts,java,go,rb,php}
Exclude: **/vendor/**, **/node_modules/**, **/venv/**
User asks: "Scan all Python files in src/"
You run:
src/**/*.py - find 15 filesverbosity: 'minimal' - 4 have issuesverbosity: 'compact' for those 4 filesResponse:
## Security Scan Summary
**Files Scanned:** 15
**Files with Issues:** 4
**Total Issues:** 3 critical, 8 warning
### Files Requiring Attention
| File | Critical | Warning | Top Issue |
|------|----------|---------|-----------|
| src/db.py | 2 | 1 | SQL Injection (L23) |
| src/auth.py | 1 | 3 | Hardcoded secret (L15) |
| src/api.py | 0 | 2 | SSL disabled (L67) |
| src/utils.py | 0 | 2 | Weak crypto (L12) |
### Priority Fixes (Top 10)
1. **src/db.py:23** - SQL Injection: Use parameterized query
2. **src/db.py:45** - SQL Injection: Use parameterized query
3. **src/auth.py:15** - Hardcoded secret: Move API_KEY to env var
...