This skill identifies OWASP vulnerabilities across backend, frontend, mobile, and library code. It's designed for developers and security professionals needing automated security analysis.
$ npx skills add https://github.com/ghostsecurity/skills --skill ghost-scan-codeghost-scan-code is a static application security testing (SAST) skill that uses AI to identify code vulnerabilities and security issues across backend, frontend, mobile, and library code. It integrates with Claude Code to provide automated security analysis without requiring manual code review. The skill works alongside other Ghost Security skills like ghost-scan-deps and ghost-scan-secrets to deliver comprehensive application security coverage. Developers and security teams use ghost-scan-code to catch security flaws early in the development process and reduce the risk of vulnerabilities reaching production.
Install using the command provided and customize scans as needed with arguments.
Scan a repository for SQL injection vulnerabilities.
Identify cross-site scripting (XSS) issues in web applications.
Detect unsafe deserialization vulnerabilities in mobile code.
Perform a full scan of a project for comprehensive security analysis.
$ npx skills add https://github.com/ghostsecurity/skills --skill ghost-scan-codegit clone https://github.com/ghostsecurity/skillsCopy the install command above and run it in your terminal.
Launch Claude Code, Cursor, or your preferred AI coding agent.
Use the prompt template or examples below to test the skill.
Adapt the skill to your specific use case and workflow.
Check the GitHub repository or documentation for usage examples.
Take a free 3-minute scan and get personalized AI skill recommendations.
Take free scan