---
name: cyber-vulnerability-scan
description: Orchestrate comprehensive vulnerability scanning across tech stacks
type: skill
triggers:
  - "vulnerability scan"
  - "run vulnerability scan"
---

# workflow-vulnerability-scan.md
# ma-agents Vulnerability Scan Orchestration

Orchestrates multiple security-focused skills from the `ma-agents` package to provide a comprehensive security scan.

## Instructions
1.  **Select Scanners**: Based on project tech stack, trigger:
    - **JS/TS**: `js-ts-security-skill`
    - **Python**: `python-security-skill`
    - **Docker**: `verify-hardened-docker-skill`
2.  **Run Tools**:
    - Execute `npm audit` or `yarn audit`.
    - Run `pip-audit` for Python environments.
    - Run `trivy image {image}` for containers.
3.  **Aggregate Results**: Collect all findings into a unified report.
4.  **Prioritization**: Rank vulnerabilities by CVSS score and exploitability.
5.  **Remediation**:
    - Propose version upgrades.
    - Propose configuration hardening steps.
