security-scanning
Use when checking code for vulnerabilities, linting shell scripts, scanning containers or IaC for security issues, or managing encrypted secrets
Best for CI/CD pipelinesWorks with GitHubLow risk
⌘source
- author
@jeremylongshore- language
- Python
★2.1kstars
281forks
May 1, 2026
✦overview.md
Key Features
- ·Scan code and containers for CVEs
- ·Lint shell scripts for bugs and pitfalls
- ·Encrypt/decrypt secrets with sops
- ·Check IaC misconfigurations
Use Cases
- →Scan a project folder for known vulnerabilities before release
- →Check a container image for security issues in CI
- →Lint shell scripts during code review
- →Encrypt secrets in a config file committed to git
Best for
- ✓CI/CD pipelines
- ✓DevSecOps teams
- ✓Security reviews
Not ideal for
- !Interactive debugging
- !Non-security code review
FAQs
name
security-scanning
description
Use when checking code for vulnerabilities, linting shell scripts, scanning containers or IaC for security issues, or managing encrypted secrets
license
MIT
allowed-tools:["Bash(trivy*)","Bash(shellcheck*)","Bash(sops*)","Read","Glob"]
version:1.0.0
author:ykotik
Security Scanning
When to Use
- Scanning a project directory for known vulnerabilities (CVEs)
- Scanning a container image before deployment
- Scanning Infrastructure-as-Code (Terraform, CloudFormation) for misconfigurations
- Linting shell scripts for bugs, pitfalls, and unsafe patterns
- Encrypting or decrypting secrets stored in YAML/JSON config files
- Checking dependencies for known security issues
Tools
| Tool | Purpose | Structured output |
|---|---|---|
| Trivy | Vulnerability scanner for filesystems, containers, IaC | --format json or --format sarif |
| ShellCheck | Static analysis and linting for shell scripts | -f json for JSON output |
| sops | Encrypt/decrypt secrets in YAML, JSON, ENV files | Outputs decrypted file to stdout |
Patterns
Scan project directory for vulnerabilities
trivy fs --format json --output results.json .
Scan project and show results in terminal
trivy fs --severity HIGH,CRITICAL .
Scan a container image
trivy image --format json --output scan.json nginx:latest
Scan Terraform files for misconfigurations
$install
1-click copynpx skills add jeremylongshore/claude-code-plugins-plus-skills --skill security-scanningSafety assessment
★
Clarity score
How clear and easy to understand the SKILL.md instructions are, rated from 1 to 5.
5/ 5
excellentVery clear and well structured, with almost no room for misunderstanding.
◎
Actionability score
How directly an agent can act on the SKILL.md instructions, rated from 1 to 5.
5/ 5
very highHighly actionable with clear, concrete steps that an agent can follow directly.