vuln-scan

Identifies candidate vulnerabilities through static source review and produces machine-readable and human-readable findings for triage.

When to use it

Use when asked to scan for vulnerabilities, review code for security issues, or find bugs in a directory.

Give it a source directory; it writes vulnerability findings as JSON and a human-readable Markdown report inside that directory.