Static source-code vulnerability scan. Reads a target directory (and THREAT_MODEL.md if present), spawns parallel review subagents per focus area, and writes VULN-FINDINGS.json + .md for /triage to consume. Read-only — no building, running, or network. For execution-verified crashes, use vuln-pipeline instead.
Install
npx skills add anthropics/defending-code-reference-harness --skill vuln-scannpx skills add anthropics/defending-code-reference-harness --skill vuln-scan -a claude-code -gnpx skills add anthropics/defending-code-reference-harness --skill vuln-scan -a codex -ggemini skills install https://github.com/anthropics/defending-code-reference-harness.git --path .claude/skills/vuln-scangh skill install anthropics/defending-code-reference-harness vuln-scangit clone --depth 1 https://github.com/anthropics/defending-code-reference-harness /tmp/anthropics__defending-code-reference-harness
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/anthropics__defending-code-reference-harness/.claude/skills/vuln-scan ~/.claude/skills/vuln-scan # Claude Code
cp -R /tmp/anthropics__defending-code-reference-harness/.claude/skills/vuln-scan ~/.agents/skills/vuln-scan # Codex, Cursor, Gemini CLI, Copilot, OpenCode