# Vulnerability Scanning

> Scan dependencies with trivy grype and pip audit

- Skill: `loopyluci/vulnerability-scanning` (Agent Skill)
- Install (CLI): `npx skillmds@latest add loopyluci/vulnerability-scanning`
- Raw SKILL.md: https://api.skillmd.com/api/skills/loopyluci/vulnerability-scanning/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: LoopyLuci (https://skillmd.com/u/loopyluci)
- Updated: 2026-09-21
- Page: https://skillmd.com/skills/loopyluci/vulnerability-scanning

---


# Vulnerability Scanning

## Python Dependencies
```bash
pip install pip-audit
pip-audit

pip install safety
safety check
```

## Containers (Trivy)
```bash
trivy image myapp:latest
trivy fs --scanners vuln .
```

## Grype
```bash
grype myapp:latest
grype dir:.
```

## CI Integration
```yaml
- run: pip-audit || true  # Warnings only
```