Security Scan
Identifies vulnerabilities and misconfigurations in code and infrastructure using automated security checks.
Install on your platform
We auto-selected Claude Code based on this skill’s supported platforms.
Run in terminal (recommended)
claude mcp add fusengine-security-scan npx -- -y @trustedskills/fusengine-security-scan
Or manually add to ~/.claude/settings.json
{
"mcpServers": {
"fusengine-security-scan": {
"command": "npx",
"args": [
"-y",
"@trustedskills/fusengine-security-scan"
]
}
}
}Requires Claude Code (claude CLI). Run claude --version to verify your install.
About This Skill
What it does
The fusengine-security-scan skill performs automated vulnerability scans on provided URLs or file paths. It identifies potential security weaknesses, such as common misconfigurations and exposed sensitive information. The scan results are presented in a structured format for easy analysis and remediation.
When to use it
- Website Security Audits: Quickly assess the security posture of a website before launch or after significant changes.
- Code Repository Scanning: Identify vulnerabilities introduced during development by scanning code repositories.
- File System Checks: Verify the security of files stored on local or remote servers, looking for exposed credentials or sensitive data.
- Compliance Verification: Support compliance efforts by identifying potential violations of security best practices.
Key capabilities
- Vulnerability Scanning
- URL scanning
- File path scanning
- Structured result reporting
Example prompts
- "Scan this URL for vulnerabilities:
https://example.com" - "Perform a security scan on the file
/path/to/sensitive_file.txt." - "Analyze this code repository (
[email protected]:user/repo.git) for potential security issues."
Tips & gotchas
The skill's effectiveness depends on providing accurate and accessible URLs or file paths. Results should be interpreted by someone with security expertise to avoid false positives and ensure proper remediation.
Tags
TrustedSkills Verification
Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.
Security Audits
| Gen Agent Trust Hub | Pass |
| Socket | Pass |
| Snyk | Pass |
🌐 Community
Passed automated security scans.