Home / Skills / vbs-scan-security
vbs-scan-security
tanviet12/vbsecSkill
Use when scanning code for security vulnerabilities. Use when user says "scan security", "kiểm tra bảo mật", "security audit", "review security", or invokes `/vbs-scan-security`. Auto-delegates to sub-agents for large scans (>20 main-language files OR >30 total OR >14 days). Outputs bilingual reports (vi/en). Optional `--auto-fix` (agentic patch + verify loop) and `--sca` (live CVE lookup via OSV.dev).
Why this score
This repo hosts 3 skills, so its 296 stars are split between them (about 99 each) for scoring.
Popularity score: 66/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank
Security
Scanned Oct 20, 2026 at commit 1b86c27936d3, with Cisco's open-source skill-scanner.
What its code does:
- Runs shell commands Common for dev tools. Read the commands it runs.rules/generic/18-missing-rate-limit.md:155, rules/generic/21-command-injection.md:109, rules/languages/python/21-command-injection.md:101 and 11 more
- Makes network requestsrules/languages/python/09-ssrf.md:99
Web addresses in its code:
- api.osv.devreferences/dependency-scan.md:30
- api.stripe.comrules/generic/09-ssrf.md:165
- yourapi.comrules/generic/15-cors-misconfig.md:11
- yourapp.comrules/generic/16-unrestricted-file-upload.md:11
These are the sites named in the code, so it's where your data could go. It isn't a complete list: code can build addresses while it runs, and a few of these may be links rather than calls. Whatever you send also goes to the AI model you use.
A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan
Alternatives
Other makers' add-ons that do the same job, next to this one.
| Name | Score | Stars | Context | Updated |
|---|---|---|---|---|
| This onevbs-scan-security tanviet12/vbsec · Skill | 66 | ★ 296 | ≈106 always | 1mo ago |
| security-diff-scan openai/codex-security · Skill Both about scan and security | 80 | ★ 11k | ≈29 always | 16d ago |
| verify-security Aurite-ai/agent-verifier · Skill Both about security and scan | 59 | ★ 45 | ≈58 always | 22d ago |
| ai-mcp-security Netw0rkNoob/VulnClaw · Skill Both about security | 71 | ★ 3.8k | ≈20 always | 23d ago |
| skill-scan XBuilderLAB/cheat-on-skill · Skill Both about scan | 51 | ★ 196 | ≈62 always | 4mo ago |
| 09-web-security Masriyan/Claude-Code-CyberSecurity-Skill · Skill Both about security and vulnerability | 66 | ★ 490 | ≈21 always | 19d ago |