NightVision
Runs authorized DAST scans and walks each SARIF finding back to the line of code that produced it.
Install
OfficialClaude Code: /plugin marketplace add anthropics/claude-plugins-official → /plugin install nightvision@claude-plugins-official
Kendi web uygulamanı ya da REST API'ni yetkili biçimde tararken ve çıkan bulguları koda bağlayıp önceliklendirirken
- Author
- NightVision
- License
- Apache-2.0
Five skills cover API discovery from source, scan configuration, running the scan, CI wiring, and triage. Triage is the one that changes the nature of the work: output arrives as SARIF from two engines, ZAP for active and passive rules and Nuclei for CVE and misconfiguration templates, and when the scan was given the OpenAPI spec the SARIF carries Code Traceback annotations mapping each finding to a file and line. That turns a report full of URLs into something the agent can open in the repository, and every finding is paired with a curl command so the owner can reproduce it before anyone edits code. Passing the spec is optional, and omitting it is precisely what strips the source mapping away.
Similar skills
CodeQL Code Scanning
SkillSets up CodeQL scanning through Actions or the CLI, and unsticks it when it fails.
SAST Configuration
SkillSets up Semgrep, CodeQL and SonarQube so the pipeline blocks real findings.
Aikido Security
SkillScans the files an agent just wrote and loops on the fix until the findings actually clear.
Comments(0)
Sign in to comment