railguard-skill
Static security vulnerability scanning and scan accuracy benchmarking
All Skills in This Repository (7)
Pure Emerald Level Indicators
Netflix-Skunkworksrailguard-superagent-scan
Analyze a code repository with 12 vulnerability rules and return consolidated findings JSON.
Netflix-Skunkworksrailguard-unified-scan
Coordinate 12 subagents for multi-phase vulnerability analysis with SQLite tracking.
Netflix-Skunkworksrailguard-benchmark
Store security scan findings in SQLite and compare runs against answer sheets.
Netflix-SkunkworksRailguard Orchestrated Security Scanner — Enhanced Variant
Coordinate 12 specialized subagents to analyze repository code for security vulnerabilities.
Netflix-Skunkworksrailguard-vulncategory-scan
Scan codebases for injection, CORS, access control, and logic vulnerabilities.
Netflix-Skunkworksrailguard-securityagentsonly-scan
Run all 12 security subagents unconditionally to collect raw vulnerability findings for benchmarking.
Netflix-Skunkworksrailguard-db-updates-orchestrated-scan
Coordinate 12 parallel subagents for multi-phase security analysis with SQLite progress tracking.
Frequently Asked Questions
FAQPage SchemaHow to install railguard-skill?▼
Run `npx skills add Netflix-Skunkworks/railguard-skill --all -g -y` in your terminal to install all scan variants globally.
What vulnerabilities does Railguard detect?▼
It covers 12 domains including SQL injection, XSS, command injection, CORS misconfiguration, authentication and authorization flaws, path traversal, file upload issues, hardcoded secrets, and prompt injection.
Which Railguard scan variant should I use?▼
Use the orchestrated scan for the most accurate results, the superagent or category scan for lower cost on small repos, and the unified or DB-tracked variants for large repositories that need crash recovery.
Does Railguard work with Claude Code?▼
Yes. All scan variants follow the standard SKILL.md format and run directly in Claude Code and other compatible coding environments.
Is Railguard production-ready?▼
No. It is an active research project from Netflix Skunkworks, so expect false positives, coverage gaps, and changing behavior. Always have a human review findings before acting on them.
Related Repositories in Software Engineering
View All in Software Engineering→
openclawopenclaw
Run a personal AI assistant across your devices and chat apps
obrasuperpowers
Gives coding agents a disciplined workflow from idea to merged code
facebookreact
AI agent skills for building, testing, and porting React core