[skill]
name = "security-scan"
description = "Scan source code for common security vulnerabilities and report findings"
version = "0.1.0"
author = "openjarvis"

[[skill.steps]]
tool_name = "file_read"
arguments_template = '{"path": "{file_path}"}'
output_key = "source_code"

[[skill.steps]]
tool_name = "think"
arguments_template = '{"thought": "Scan for security vulnerabilities: SQL injection, XSS, command injection, hardcoded secrets, insecure crypto, path traversal, SSRF, deserialization issues: {source_code}"}'
output_key = "vulnerabilities"

[[skill.steps]]
tool_name = "think"
arguments_template = '{"thought": "Generate a security report with severity ratings (critical, high, medium, low), affected lines, and remediation advice: {vulnerabilities}"}'
output_key = "report"
