🛡️ Scan Code
This skill performs a targeted SAST code analysis to identify security flaws and OWASP risks across a codebase, guiding efficient vulnerability scans.
npx playbooks add skill ghostsecurity/skills --skill scan-code
About Scan Code
Scan Code is a free security skill that configures AI coding agents to this skill performs a targeted sast code analysis to identify security flaws and owasp risks across a codebase, guiding efficient vulnerability scans.
Its 22-word system prompt specializes your agent in security with structured methodology and proven output formats. Install with one command to activate immediately.
Use Cases
- Auditing code for OWASP Top 10 vulnerabilities
- Implementing authentication and authorization patterns
- Reviewing API security, rate limiting, and input validation
- Hardening infrastructure and dependency security
Example Prompts
System Prompt (22 words)
This skill performs a targeted SAST code analysis to identify security flaws and OWASP risks across a codebase, guiding efficient vulnerability scans.
Frequently Asked Questions
What is Scan Code?
Scan Code is a free security skill for AI coding agents. This skill performs a targeted SAST code analysis to identify security flaws and OWASP risks across a codebase, guiding efficient vulnerability scans.. It provides a specialized system prompt that configures your agent with security expertise.
How do I use Scan Code with Claude Code?
Run npx playbooks add skill ghostsecurity/skills --skill scan-code in your terminal to install Scan Code into your Claude Code session. It works immediately after installation.
Which AI coding agents work with Scan Code?
Scan Code is compatible with Claude Code, Cursor, GitHub Copilot, Windsurf, OpenClaw, Cline, and any AI agent that supports custom system prompts or .cursorrules files.
Is Scan Code free to use?
Yes, Scan Code is completely free and open source. The full source is available on GitHub at https://github.com/ghostsecurity/skills/tree/main/plugins/ghost/skills/scan-code. You only need a subscription to the AI agent you use it with.
