scan-site Skill
Runs a security scan on a deployed Power Pages site, fetches the latest scan report, and produces a plain-language summary. Scans the live site's public surface for vulnerabilities and surfaces issues by severity. Use when the user wants to scan, check, test, audit, or assess a published site, find vulnerabilities on p Published by microsoft in power-platform-skills.
What is scan-site Skill?
Runs a security scan on a deployed Power Pages site, fetches the latest scan report, and produces a plain-language summary. Scans the live site's public surface for vulnerabilities and surfaces issues by severity. Use when the user wants to scan, check, test, audit, or assess a published site, find vulnerabilities on p Published by microsoft in power-platform-skills. This profile combines repository metadata with install, compatibility, and usage signals so developers can quickly decide whether it fits their agent workflow before opening the source repository.
Automated repository signals based on public metadata such as recency, license, installation evidence, and adoption. These are not a security audit or endorsement.
Key capabilities
- Includes SKILL.md support
- Reusable instructions support
- Testing
- Security review
- Testing use cases
- Security review use cases
Technical details
- Install or run with Copy skill directory
When to use scan-site Skill
- Use it for testing.
- Use it for security review.
Built with
Editorial notes
Source
- Creator: microsoft
- Repository: microsoft/power-platform-skills
- Skill file: plugins/power-pages/skills/scan-site/SKILL.md
What it does
Runs a security scan on a deployed Power Pages site, fetches the latest scan report, and produces a plain-language summary. Scans the live site's public surface for vulnerabilities and surfaces issues by severity. Use when the user wants to scan, check, test, audit, or assess a published site, find vulnerabilities on p
Skill instructions
Plugin check: Run node "${PLUGINROOT}/scripts/check-version.js" — if it outputs a message, show it to the user before proceeding. Scan Site Run a security scan on a deployed Power Pages site, fetch the latest scan report, and surface findings in a plain-language summary. The scan runs server-side; duration depends on site size — small sites finish in minutes, large sites can take hours. This skill scans the live deployed site, not local source code. Initial request: $ARGUMENTS Gotchas - Website record id vs portal id. .powerpages-site/website.yml stores the website record id, not the portal id. Every script takes --portalId. Resolve once via website.js --websiteId during prerequisites. - Never resolve by name. Site names can duplicate inside an environment; only the website record id is safe. - null from the resolver means the site is not deployed, or the authenticated profile points at a different environment. - Scans are long-running. Duration depends on site size — small sites finis
Explore related resources
Frequently asked questions
What is scan-site?
scan-site is a open-source AI agent skill with Copy skill directory. Runs a security scan on a deployed Power Pages site, fetches the latest scan report, and produces a plain-language summary.
Who is scan-site best for?
scan-site is best for reusing agent instructions, scripts, and references, testing workflows, security review workflows.
How do I install scan-site?
Install or run scan-site using Copy skill directory. Check scan-site for the latest setup command.
Is scan-site actively maintained?
scan-site may need a closer maintenance check before production use.
Auto-fetched from GitHub.
