Security audit
dependency-security-scan
Security checks for vulnerabilities and agentic risk
Overview
This documentation-only skill guides Java dependency vulnerability checks and its suggested commands match that purpose.
Install this if you want guided Java dependency security analysis. When using it, run build and scanner commands only in repositories you trust, because Maven or Gradle tasks and vulnerability scanners may inspect project files, download metadata, query public vulnerability APIs, and generate local report files that could include private dependency names or repository details.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.