security-scan
Run full security scans on the codebase using Ruflo security tools
Best for CI/CD pipelinesWorks with GitHubLow risk
⌘source
- author
@ruvnet- repo
- ruvnet/ruflo
- language
- TypeScript
★46kstars
5.1kforks
May 5, 2026
✦overview.md
Key Features
- ·Scans dependencies and CVEs
- ·Checks input validation and path traversal
- ·Detects secrets and injection vectors
- ·Supports quick, standard, and full depth
- ·Stores findings via MCP memory
- ·Generates markdown reports
Use Cases
- →Run before deploying to catch vulnerabilities
- →Integrate into CI pipeline for automated security checks
- →Audit codebase for secrets and auth flaws
- →Generate security report for compliance review
Best for
- ✓CI/CD pipelines
- ✓Security audits
- ✓Teams with security compliance needs
Not ideal for
- !One-off quick checks without context
- !Non-code assets (e.g., infrastructure configs)
FAQs
name
security-scan
description
Run full security scans on the codebase using Ruflo security tools
allowed-tools:Bash(npx *) mcp__claude-flow__memory_store mcp__claude-flow__hooks_post-task Read Grep
argument-hint:[depth: quick|standard|full]
Run a security scan at the specified depth.
Via CLI:
npx @claude-flow/cli@latest security scan --depth DEPTH
npx @claude-flow/cli@latest security cve --check
npx @claude-flow/cli@latest security report --format markdown
| Depth | Checks |
|---|---|
| quick | Dependencies, known CVEs |
| standard | + Input validation, path traversal, secrets |
| full | + Threat modeling, injection vectors, auth flows |
Store findings via MCP: mcp__claude-flow__memory_store({ key: "scan-findings", value: "SUMMARY", namespace: "security" })
Train patterns: mcp__claude-flow__hooks_post-task({ taskId: "security-scan", success: true, storeResults: true })
$install
1-click copynpx skills add ruvnet/ruflo --skill security-scanSafety assessment
★
Clarity score
How clear and easy to understand the SKILL.md instructions are, rated from 1 to 5.
4/ 5
very goodClear and well structured, with only minor parts that might need a second read.
◎
Actionability score
How directly an agent can act on the SKILL.md instructions, rated from 1 to 5.
4/ 5
highMostly actionable with clear steps; only a few small gaps remain.