vulnerability-scanner

Advanced vulnerability analysis aligned with OWASP 2025, supply chain threats, and risk prioritization frameworks. Think like an attacker, defend like an expert. 2025 threat landscape awareness. Execute for automated validation: Before scanning, ask: Each finding should answer: Remember: Vulnerability scanning finds issues. Expert thinking prioritizes what matters. Always ask: "What would an attacker do with this?" This skill is applicable to execute the workflow or actions described in the overview. - Covers OWASP Top 10:2025 including new categories for supply chain security (A03) and exceptional conditions (A10), with threat modeling questions and attack vector mapping - Provides attack surface mapping methodology, CVSS/EPSS-based risk prioritization, and a four-phase scanning approach (reconnaissance, discovery, analysis, reporting) - Includes code pattern analysis for high-risk constructs (injection, RCE, deserialization, path traversal) and secret detection indicators - Offers security expert mindset principles (assume breach, zero trust, defense in depth, fail-secure) and cloud-specific responsibility checks for shared infrastructure models - What are we protecting? (Assets) - Who would attack?