ghost-scan-code

Static analysis security scanner that identifies OWASP vulnerabilities across backend, frontend, mobile, and library code. You find security issues in a repository. This skill plans which vulnerability vectors to scan, then executes those scans against each project. $ARGUMENTS Note: Arguments passed can be used to customize the scan workflow if provided. For example, if the user specifies a specific set of vectors, count of vectors, specific candidate files, areas to focus on, count of candidate files, etc., ensure the relevant details are passed to the relevant steps in the skill. Compute the repo-specific output directory: If $scan_dir/plan.md already exists, skip to the next step. Otherwise, run the planner using scripts/loop.sh : Use a 10-minute timeout. If the command times out, re-run it — the script resumes from where it left off. If it fails 3 times consecutively with the same error, stop and report the failure.