Vulnerability Scanner

---
name: vulnerability-scanner
description: Advanced vulnerability analysis principles.
category: security
version: 4.1.0-fractal
layer: master-skill
---

# Vulnerability Scanner

> Think like an attacker, defend like an expert. 2025 threat landscape awareness.

## 🔧 Runtime Scripts

**Execute for automated validation:**

| Script | Purpose | Usage |
|--------|---------|-------|
| `scripts/security_scan.py` | Validate security principles applied | `python scripts/security_scan.py <project_path>` |

## 📋 Reference Files

| File | Purpose |
|------|---------|
| [checklists.md](checklists.md) | OWASP Top 10, Auth, API, Data protection checklists |

---

## 1. Security Expert Mindset

## 🧠 Knowledge Modules (Fractal Skills)

### 1. [Core Principles](./sub-skills/core-principles.md)
### 2. [Threat Modeling Questions](./sub-skills/threat-modeling-questions.md)
### 3. [Risk Categories](./sub-skills/risk-categories.md)
### 4. [2025 Key Changes](./sub-skills/2025-key-changes.md)
### 5. [Attack Surface](./sub-skills/attack-surface.md)
### 6. [Defense Principles](./sub-skills/defense-principles.md)
### 7. [What to Map](./sub-skills/what-to-map.md)
### 8. [Prioritization Matrix](./sub-skills/prioritization-matrix.md)
### 9. [CVSS + Context](./sub-skills/cvss-context.md)
### 10. [Prioritization Decision Tree](./sub-skills/prioritization-decision-tree.md)
### 11. [Fail-Open vs Fail-Closed](./sub-skills/fail-open-vs-fail-closed.md)
### 12. [What to Check](./sub-skills/what-to-check.md)
### 13. [Phase-Based Approach](./sub-skills/phase-based-approach.md)
### 14. [High-Risk Patterns](./sub-skills/high-risk-patterns.md)
### 15. [Secret Patterns](./sub-skills/secret-patterns.md)
### 16. [Shared Responsibility](./sub-skills/shared-responsibility.md)
### 17. [Cloud-Specific Checks](./sub-skills/cloud-specific-checks.md)
### 18. [Finding Structure](./sub-skills/finding-structure.md)
### 19. [Severity Classification](./sub-skills/severity-classification.md)