ghost-scan-code
ghostsecurityFind and verify security flaws across your codebase.
application security
What it does
Finds and verifies security vulnerabilities by planning targeted scans across projects in a repository.
When to use it
Use for code security audits, SAST scans, source vulnerability scans, or requests to find security flaws.
How to use it
Give it a repository; it produces finding files, counts verified and rejected findings, and presents a summary.
What you provide
- An existing project
Access · 2
This skill
$HOME/.ghost/repos/<repo-id>/cache/repo.md
Read
Reads cached repository context
temporary worker files
Write
Uses temporary worker files
Good to know
- starts 1 helper agents
- starts one helper agent per item, so the count depends on the work
- works out of sight
What you need · 2
The loop script requires the claude command to launch helper sessions with restricted tools.
Runs repo-context when the repository context cache is missing, then continues the scan.
About this skill
- Visibility
- Public
- Repository
- ghostsecurity/skills
- Created
- Oct 8, 2026
- Updated
- Oct 8, 2026
- Files
- 12