Scan Site

What it does

Performs a live security scan of a deployed Power Pages site, fetches the latest report, and produces a clear, plain-language summary of findings by severity. The skill automates checking scan state, starting or attaching to a scan, polling for completion, transforming report JSON, and recommending follow-up actions mapped to downstream skills. It is read-only: it does not change site configuration.

When to use it

Use when you want a quick security health check of a live Power Pages site, to see whether there are vulnerabilities, to fetch the most recent completed scan report, or to run a new scan when none exists. Suitable for site owners, devops, or reviewers who need an accessible summary rather than raw scan data.

What's included

• Scripts: scripts to start, poll, fetch, and transform deep scan reports (has_scripts: true).
• References: guidance and mapping files to interpret risks and render HTML reports (has_references: true).
• Instructions: step-by-step workflow (prerequisites, check state, choose action, run scan, transform report, present summary, suggest follow-ups).

Compatible agents

Best used by agents with Bash/Python/Node tool access (Claude Code / Copilot-style agents) that can run repository scripts and read outputs.