Identifies potential dependency confusion vulnerabilities by analyzing project dependencies and detecting potential package name conflicts across registries.

🎯

container-scan-dockle🎯Skill

Scans Docker container images for security misconfigurations, best practices, and CIS benchmark compliance using lightweight static analysis.

🎯

license-scan-scancode🎯Skill

Scans software projects for license compliance, identifying open-source licenses, potential conflicts, and attribution requirements using ScanCode toolkit.

🎯

sca-osv-scanner🎯Skill

Scans open-source dependencies for known vulnerabilities using the Open Source Vulnerability (OSV) database and provides detailed security insights.

🎯

iac-scan-kube-linter🎯Skill

Scans Kubernetes manifests and Helm charts for security misconfigurations, best practices, and potential vulnerabilities using kube-linter rules.

🎯

container-scan-trivy🎯Skill

Scans container images for vulnerabilities, misconfigurations, and security risks using the open-source Trivy scanner.

🎯

sast-detekt🎯Skill

Performs static analysis on Kotlin and Android codebases to identify security vulnerabilities, code smells, and potential risks automatically.

🎯

cloud-security-prowler🎯Skill

Scans AWS cloud infrastructure for security vulnerabilities, misconfigurations, and compliance risks using comprehensive PROWLER assessment framework

🎯

container-scan-hadolint🎯Skill

Scans Dockerfiles for security vulnerabilities, style violations, and best practices using Hadolint's comprehensive linting rules