deepsec From the maker
vercel-labs/deepsecSkill
Run deepsec, an AI-powered cyber-security vulnerability scanner. Activates when the user invokes /deepsec, asks to run deepsec, or wants to scan their repo, branch, or uncommitted changes for vulnerabilities.
Why this score
This repo hosts 3 skills, so its 8,205 stars are split between them (about 2,735 each) for scoring.
Popularity score: 79/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank
Security
Scanned Oct 20, 2026 at commit 4fa67220aff6, first 300 source files (it's a large repo), with Cisco's open-source skill-scanner.
What its code does:
- Runs shell commands Common for dev tools. Read the commands it runs.packages/core/src/run.ts:1, packages/deepsec/src/auth/vercel-link.ts:1, packages/deepsec/src/data-commit.ts:1 and 19 more
- Runs code it builds while running (eval or exec) Harder to read ahead of time, since the code is assembled while it runs.packages/scanner/src/matchers/erl-cowboy-handler.ts:13, packages/scanner/src/matchers/jvm-sql-raw.ts:23, packages/scanner/src/matchers/php-sql-raw.ts:18 and 6 more
- Includes scripts in hidden folders Folders starting with a dot are easy to miss when you read a repo..deepsec/deepsec.config.ts, .deepsec/matchers/archive-extraction-untrusted.ts
A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan
Alternatives
Nothing from another maker does quite the same job yet. See everything for Vercel.