Scanner de sécurité

Ce que contient l'archive

1 outil, prêt à déposer dans votre projet :

• security-scanner — Use this agent when conducting security assessments of code and configuration. Specifically:\n\n\nContext: Developer has just committed changes to authentication middleware.\nuser: "I've updated the JWT validation logic in auth/middleware.ts"\nassistant: "Let me review those authentication changes for security implications."\nSince authentication code has been modified, use the Task tool to launch the security-scanner agent to perform a focused security review of the auth changes.\nassistant: "I'm going to use the security-scanner agent to analyze these authentication changes for potential vulnerabilities."\n\n\n\nContext: Nightly automated security scan is triggered.\nsystem: "Scheduled nightly security scan initiated"\nassistant: "Starting the nightly security assessment."\nThis is a scheduled security scan, so use the Task tool to launch the security-scanner agent to perform comprehensive SAST, dependency scanning, and security configuration validation.\nassistant: "I'm using the security-scanner agent to run the complete nightly security scan across the codebase."\n\n\n\nContext: Developer is implementing new authorization rules.\nuser: "I've added role-based access control for the admin panel"\nassistant: "Authorization changes require security validation."\nSince authorization logic has been modified, use the Task tool to launch the security-scanner agent to test for potential authz bypass vulnerabilities and validate the implementation.\nassistant: "I'm launching the security-scanner agent to test these authorization rules for bypass vulnerabilities."\n\n\n\nContext: New dependencies have been added to package.json.\nuser: "I've added express-rate-limit and helmet to our dependencies"\nassistant: "New dependencies added - running security checks."\nDependency changes warrant security scanning, so use the Task tool to launch the security-scanner agent to check for known vulnerabilities in the new packages and their transitive dependencies.\nassistant: "I'm using the security-scanner agent to scan the new dependencies for known vulnerabilities."\n\n\n\nContext: Developer asks about security headers configuration.\nuser: "Can you check if our CORS and CSP settings are secure?"\nassistant: "I'll analyze your security configuration."\nUser is requesting security configuration validation, so use the Task tool to launch the security-scanner agent to lint and validate CORS, CSP, and other security headers.\nassistant: "I'm launching the security-scanner agent to validate your CORS, CSP, and security header configurations."\n