File contents name: vulnerability-scanner
description: Security vulnerability scanning and OWASP guidelines
Vulnerability Scanner
Identify and fix security vulnerabilities.
OWASP Top 10
Risk
Prevention
Injection
Parameterized queries
Broken Auth
Secure session management
Sensitive Data
Encryption, HTTPS
XXE
Disable external entities
Broken Access
RBAC, validate permissions
Security Misconfig
Security headers
XSS
Output encoding
Insecure Deserialization
Input validation
Vulnerable Components
Update dependencies
Insufficient Logging
Audit logs
Security Checklist
Authentication
Authorization
Data
Code Patterns to Avoid
// ❌ SQL Injection
$"SELECT * FROM Users WHERE Email = '{email}'"
// ✅ Parameterized
"SELECT * FROM Users WHERE Email = @Email"
// ❌ Hardcoded secret
var secret = "my-secret-key";
// ✅ KeyVault
var secret = Configuration["SecretKey"];
Security Headers
// Add security headers
app.Use(async (context, next) =>
{
context.Response.Headers.Add("X-Content-Type-Options", "nosniff");
context.Response.Headers.Add("X-Frame-Options", "DENY");
context.Response.Headers.Add("X-XSS-Protection", "1; mode=block");
await next();
});
Dependency Scanning
# .NET
dotnet list package --vulnerable
# npm
npm audit
DO / DON'T
✅ Do
❌ Don't
Validate all input
Trust user data
Use KeyVault
Hardcode secrets
Hash passwords
Store plain text
Update dependencies
Ignore vulnerabilities
Converted and distributed by TomeVault — claim your Tome and manage your conversions.
1 --- 2 name: tridentsof-antigravity-dev-kit-vulnerability-scanner 3 description: --- 4 --- 5 --- 6 name: vulnerability-scanner 7 description: Security vulnerability scanning and OWASP guidelines 8 --- 9 10 # Vulnerability Scanner 11 12 > Identify and fix security vulnerabilities. 13 14 --- 15 16 ## OWASP Top 10 17 18 | Risk | Prevention | 19 |------|------------| 20 | Injection | Parameterized queries | 21 | Broken Auth | Secure session management | 22 | Sensitive Data | Encryption, HTTPS | 23 | XXE | Disable external entities | 24 | Broken Access | RBAC, validate permissions | 25 | Security Misconfig | Security headers | 26 | XSS | Output encoding | 27 | Insecure Deserialization | Input validation | 28 | Vulnerable Components | Update dependencies | 29 | Insufficient Logging | Audit logs | 30 31 --- 32 33 ## Security Checklist 34 35 ### Authentication 36 - [ ] Passwords hashed (bcrypt/argon2) 37 - [ ] Session tokens secure 38 - [ ] Token expiration set 39 - [ ] Brute force protection 40 41 ### Authorization 42 - [ ] RBAC implemented 43 - [ ] Resource-level checks 44 - [ ] API endpoints protected 45 46 ### Data 47 - [ ] HTTPS enforced 48 - [ ] Sensitive data encrypted 49 - [ ] No secrets in code 50 - [ ] Input validated 51 52 --- 53 54 ## Code Patterns to Avoid 55 56 ```csharp 57 // ❌ SQL Injection 58 $"SELECT * FROM Users WHERE Email = '{email}'" 59 60 // ✅ Parameterized 61 "SELECT * FROM Users WHERE Email = @Email" 62 ``` 63 64 ```csharp 65 // ❌ Hardcoded secret 66 var secret = "my-secret-key"; 67 68 // ✅ KeyVault 69 var secret = Configuration["SecretKey"]; 70 ``` 71 72 --- 73 74 ## Security Headers 75 76 ```csharp 77 // Add security headers 78 app.Use(async (context, next) => 79 { 80 context.Response.Headers.Add("X-Content-Type-Options", "nosniff"); 81 context.Response.Headers.Add("X-Frame-Options", "DENY"); 82 context.Response.Headers.Add("X-XSS-Protection", "1; mode=block"); 83 await next(); 84 }); 85 ``` 86 87 --- 88 89 ## Dependency Scanning 90 91 ```bash 92 # .NET 93 dotnet list package --vulnerable 94 95 # npm 96 npm audit 97 ``` 98 99 --- 100 101 ## DO / DON'T 102 103 | ✅ Do | ❌ Don't | 104 |-------|---------| 105 | Validate all input | Trust user data | 106 | Use KeyVault | Hardcode secrets | 107 | Hash passwords | Store plain text | 108 | Update dependencies | Ignore vulnerabilities | 109 110 --- 111 > Converted and distributed by [TomeVault](https://tomevault.io/claim/tridentsof) — claim your Tome and manage your conversions. 112 <!-- tomevault:4.0:skill_md:2026-04-16 -->
commit d44e4296e4
Frequently asked questions How do I install the Tridentsof Antigravity Dev Kit Vulnerability Scanner skill? Run npx skillmds@latest add tomevault-io/tridentsof-antigravity-dev-kit-vulnerability-scanner in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.
What does the Tridentsof Antigravity Dev Kit Vulnerability Scanner skill do? --- It is listed under Coding & Dev Tools on SkillMD.
Is Tridentsof Antigravity Dev Kit Vulnerability Scanner safe to use? This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.
Which AI agents work with Tridentsof Antigravity Dev Kit Vulnerability Scanner? This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.
Is Tridentsof Antigravity Dev Kit Vulnerability Scanner free to use? Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.
Who published Tridentsof Antigravity Dev Kit Vulnerability Scanner? tomevault-io (@tomevault-io) published this skill. Their other Agent Skills are listed on their SkillMD profile.
tomevault-io