@ghostsecurity

ghost-scan-deps orchestrates software composition analysis by spawning subagents to discover lockfiles, scan for vulnerabilities with wraith, analyze exploitability, and generate findings reports.

ghost-scan-secrets orchestrates multi-stage secrets detection by delegating setup, poltergeist initialization, candidate scanning, analysis, and summarization to specialized subagents via the task tool.

ghost-scan-code plans and executes targeted static analysis scans across repositories, selecting vulnerability vectors based on scan depth (quick, balanced, full) and optional argument overrides for customization.

ghost-report aggregates findings from multiple security scanners into a single prioritized report, with caching at commit level and severity-based sorting, but lacks clear procedural steps and concrete trigger patterns.

Scans directory structure, detects projects, maps dependencies, and documents code organization into a repo.md file. Use when the user needs a codebase…

This skill should be used when the user asks to "validate a finding", "check if a vulnerability is real", "triage a security finding", "confirm a…

Starts and controls the reaper MITM proxy to capture, inspect, search, and replay HTTP/HTTPS traffic between clients and servers. Capabilities include…