# Horusec

> Use this skill when the user wants to scan for security vulnerabilities, perform SAST analysis, or check code for security issues.

- Skill: `javimosch/horusec` (Agent Skill)
- Install (CLI): `npx skillmds@latest add javimosch/horusec`
- Raw SKILL.md: https://api.skillmd.com/api/skills/javimosch/horusec/raw
- Safety review: PASS (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: javimosch (https://skillmd.com/u/javimosch)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/javimosch/horusec

---


# horusec Plugin

Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command. Security vulnerability scanner.

## Commands

### Security Scanning
- `horusec scan start` — Start security vulnerability scan

### Utility
- `horusec _ _` — Passthrough to horusec CLI

## Usage Examples
- "Scan for vulnerabilities"
- "Security analysis"
- "SAST scan"
- "Check security issues"

## Installation

```bash
brew install horusec
```

Or via Go:
```bash
go install github.com/ZupIT/horusec/cmd/horusec@latest
```

## Examples

```bash
# Scan project
horusec scan start ./myproject

# JSON output
horusec scan start ./myproject --json-output

# Skip folders
horusec scan start ./myproject --skip-folder node_modules

# Remote analysis
horusec scan start ./myproject --remote

# Any horusec command with passthrough
horusec _ _ start ./myproject
horusec _ _ start ./myproject --json-output
```

## Key Features
- **Multi-language** - Go, Python, Java, Kotlin, Ruby, and more
- **SAST** - Static application security testing
- **Fast** - Quick vulnerability detection
- **CI/CD** - Pipeline integration
- **Comprehensive** - Multiple vulnerability types
- **Remote** - Cloud-based analysis
- **Customizable** - Configurable rules
- **Reports** - Detailed security reports
- **Cross-platform** - Linux, macOS, Windows
- **Open source** - Free and extensible

## Notes
- Great for security scanning
- Supports many programming languages
- Perfect for CI/CD pipelines
- Identifies security flaws early