“Security scanning”

codex-security:attack-path-analysis - Use when Codex is already in the attack-path-analysis phase of a security scan or the user explicitly asks to trace a…

Scan any agent skill for security risks before you install or use it.

Scan the working tree or a diff for hardcoded secrets (API keys, tokens, private keys, passwords).

Free passive security scan for AI-built apps: leaked API keys, public.env files, security headers

Register/verify your domains, queue security scans, and read findings (CVE, severity).

Advanced NPM analysis: Recursive security scanning, ecosystem awareness, and deep insights.

Scan any public GitHub MCP-server repo for security issues.

Scan code for security issues: dependency vulnerabilities (npm/pip audit), secret leaks (regex and entropy analysis), and OWASP anti-patterns like SQL…

Scan an iOS/macOS Xcode project for common App Store rejection patterns before submission.

DNS lookups, health reports, SSL certs, security scans, GEO scoring, uptime checks

Scan websites for security vulnerabilities, headers, TLS, and email security.

Pre-commit verification pipeline — static security scan, baseline-aware quality gates, independent reviewer subagent, and auto-fix loop.

Security audit workflow - OWASP Top 10, input validation, auth, secret detection, vulnerability scan

CI/CD pipeline design, optimization, DevSecOps security scanning, and troubleshooting.

Scans a website to find broken links (404s, 500s).

Use this skill when you need to design security testing around OWASP risks, vulnerability scanning, and penetration scenarios; triggers include security…

Scan the codebase for security vulnerabilities — hardcoded secrets, injection risks, exposed credentials, insecure patterns.

Precision-first security scanning for Model Context Protocol servers.

PromptGuard Scan MCP

promptguardscan.spaceOfficial

Paid remote MCP for LLM security scans, jailbreak checks, analytics, checkout, and readiness.

Code review as an MCP server — structured reviews with OWASP security scanning.

Use before release/deploy to run a GO/NO-GO safety checklist — build, tests, migrations, env vars, security scan, backward compat, rollback, known risks.

Security scanning and trust verification for AI agent tools.

Pre-commit verification pipeline — static security scan, baseline-aware quality gates, independent reviewer subagent, and auto-fix loop.

Search-first MCP server for JavaScript reverse engineering: 735 tools across 36 domains.