Security Scan

Run full security scans on the codebase using Ruflo security tools. Use when reviewing PRs for security regressions, auditing auth/input-handling code, before production deploys, or when the user asks for a security check at quick/standard/deep depth.

thedixitjain 6cddc8b 1.2 KB Updated 2 repo stars

File contents

Run a security scan at the specified depth.

Via CLI:

npx @claude-flow/cli@latest security scan --depth DEPTH --output json
npx @claude-flow/cli@latest security cve --list
npx @claude-flow/cli@latest security threats --model stride --export md
Depth Checks
quick Dependencies, known CVEs
standard + Input validation, path traversal, secrets
deep + Threat modeling, injection vectors, auth flows

Store findings via MCP: mcp__plugin_ruflo-core_ruflo__memory_store({ key: "scan-findings", value: "SUMMARY", namespace: "security-findings" })

Train patterns: mcp__plugin_ruflo-core_ruflo__hooks_post-task({ taskId: "security-scan", success: true, storeResults: true })


Source: ruvnet/rufloplugins/ruflo-security-audit/skills/security-scan/SKILL.md

thedixitjain/the-mega-skill-library/tree/main/library/security-and-compliance/security-scan--ruvnet commit 6cddc8b5ff

Frequently asked questions

npx skillmds add thedixitjain/security-scan-2