Continuous quality scanner for the product lifecycle (Snyk-style). Findings, not failures. Severity + confidence + location + reason + fix per finding. Read-only. Auto-invoked by /build at phase boundaries. Owners decide; the scanner informs.
Installs into .claude/skills of the current project.
Are you the author of Scan?
Add the live security badge to your README. It updates with every re-scan.
[](https://www.skillsdirectory.com/skills/vivekschaudhary-scan)
---
name: scan
description: Continuous quality scanner for the product lifecycle (Snyk-style). Findings, not failures. Severity + confidence + location + reason + fix per finding. Read-only. Auto-invoked by /build at phase boundaries. Owners decide; the scanner informs.
---
Execute the workflow at `compass/workflows/scan.md`.
Read that workflow file now and follow it step by step. Load the Scanner agent context (`compass/agents/scanner.md`, migrated v0.3.32). Respect suppression policies per `compass/config.yaml` `scanner.suppression_policy`. The scan itself has no HITL gate; HITL only applies to suppressions of Critical findings.
$ARGUMENTS