Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →a5c-ai/security-scanner
Run security scans including SAST, dependency scanning, and secret detection
Passed 20 of 25 test cases with the skill, and 9 of 25 without it.
and 9 more in the full report
12 fixed8 passed either way4 still failing1 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 12 test cases the skill fixed. Same model, same prompt, with and without the skill.
When scanning Java dependencies in `pom.xml`, the team wants to explicitly override Snyk with OWASP Dependency-Check. What tool name should be set under tools.dependencies?
| Checked | Without skill | With skill |
|---|---|---|
| Sets the dependencies tool property to owasp inside the tools configuration. | Missed | Passed |
The instructions your model reads when the skill loads.
Runs comprehensive security scans including SAST scanning with Semgrep/CodeQL, dependency vulnerability scanning with Snyk/OWASP, secret detection, and container image scanning.
{
"type": "object",
"required": ["targets"],
"properties": {
"targets": {
"type": "array",
"items": { "type": "string" },
"description": "Paths to scan"
},
"scanTypes": {
"type": "array",
"items": {
"type": "string",
"enum": ["sast", "dependencies", "secrets", "containers", "licenses"]
},
"default": ["sast", "dependencies", "secrets"]
test cases passed, vs 9 / 25 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.