NightVision DAST and API Discovery skills plugin for Claude Code
Install
npx skills add nvsecurity/nightvision-skillsgh skill install nvsecurity/nightvision-skillsgit clone --depth 1 https://github.com/nvsecurity/nightvision-skillsSkills in this collection
- API DiscoveryNightVision SecurityFormer name of the source-intelligence skill, kept so that invoking api-discovery still works. Use source-intelligence instead.
- App Security ScanNightVision SecurityDAST-first NightVision scan for an app you just built or changed. Use when a user, or a project or org agent-instructions rule, wants a local, private, staging, or internal web app/API security-scanned. Drives the NightVision MCP `run-app-security-scan` harness.
- CI CD IntegrationNightVision SecurityGuide for agents to help users integrate NightVision DAST scanning into CI/CD pipelines. Use when setting up security scans in GitHub Actions, GitLab CI, Azure DevOps, Jenkins, BitBucket, or JFrog pipelines, configuring NightVision tokens, creating targets, running scans, exporting results as SARIF/CSV, or detecting API breaking changes.
- Scan ConfigurationNightVision SecurityGuide for agents to help users configure NightVision DAST scans. Use when creating targets, setting up authentication (Playwright, headers, cookies), recording HTTP traffic, managing projects, configuring scope exclusions, or preparing private network scans.
- Scan ReportNightVision SecurityGenerate a shareable NightVision security report as a PDF - an executive summary for AppSec and leadership plus a findings appendix for developers - for one scan, a scan compared with the previous one, or a whole project. Use when a user wants a PDF, a report, or something to send to a CISO, manager, auditor, or another team about NightVision scan results.
- Scan TriageNightVision SecurityGuide for agents to help users interpret and act on NightVision DAST scan results. Use when reading SARIF/CSV findings, explaining vulnerabilities, locating vulnerable code, validating findings with curl, prioritizing by severity, suggesting remediations, or marking false positives.
- Source IntelligenceNightVision SecurityGuide for agents to help users extract OpenAPI specs from source code using NightVision Source Intelligence. Use when running openapi extract (also spelled swagger extract), identifying framework support, troubleshooting extraction, handling unresolved variables, comparing API specs, or understanding Code Traceback.