ghost-scan-code
ghostsecurity4.7k installs
Find and verify security flaws across your codebase.
What it does
Finds and verifies security vulnerabilities by planning targeted scans across projects in a repository.
When to use it
Use for code security audits, SAST scans, source vulnerability scans, or requests to find security flaws.
How to use it
Give it a repository; it produces finding files, counts verified and rejected findings, and presents a summary.
What you provide
- An existing project
Good to know
- starts 1 helper agents
- starts one helper agent per item, so the count depends on the work
- works out of sight
Latest review
What you need · 2
The loop script requires the claude command to launch helper sessions with restricted tools.
Runs repo-context when the repository context cache is missing, then continues the scan.
Access · 2
This skill
$HOME/.ghost/repos/<repo-id>/cache/repo.md
Read
Reads cached repository context
temporary worker files
Write
Uses temporary worker files