ersinkocCommunity·48 Agent Skills Included

security-check

Full codebase security audits, vulnerability detection, and PR scanning

Scans codebases for SQL injection, XSS, RCE, secrets, misconfigurations, and 40+ other vulnerability classes across 7 programming languages. Eliminates false positives through reachability analysis and confidence scoring, then generates a prioritized remediation report. Runs full audits or fast diff-mode PR scans with plain-English commands, no external tools or CI changes required.

56|5

↗

npx skills add ersinkoc/security-check --all -g -y

Available:

Tells the agent which natural-language phrases trigger a full or diff-mode security scan and orchestrates the 4-phase pipeline of recon, parallel vulnerability hunting, verification, and report generation across all 48 sub-skills.

All Skills in This Repository (48)

Pure Emerald Level Indicators

📦 In Repo

ersinkoc

sc-lang-python

Detect insecure deserialization and pickle misuse in Python projects.

sc-deserialization

Detect insecure deserialization vulnerabilities across Python, Java, PHP, .NET, Ruby, Node.js, YAML, and XML.

sc-lang-rust

Identify Rust security vulnerabilities in unsafe blocks, FFI boundaries, and concurrency patterns.

sc-cmdi

Detect OS command injection vulnerabilities across multiple programming languages.

sc-api-security

Audit REST, GraphQL, and gRPC API security controls across code and configurations.

sc-ldap

Identify LDAP injection vulnerabilities in codebases and configurations.

sc-path-traversal

Detect path traversal weaknesses in source code and runtime environments.

sc-auth

Detect authentication vulnerabilities in web applications and APIs.

sc-lang-java

Identify Java/Kotlin security flaws like deserialization and JNDI injection.

sc-diff-report

Scan changed files to classify and report security vulnerabilities during code reviews.

sc-orchestrator

Coordinate end-to-end security scanning across multiple phase-specific tools.

sc-report

Generate a CVSS-aligned SECURITY-REPORT.md from verified findings and architecture.

Community

Advanced

Frequently Asked Questions

FAQPage Schema

How to install security-check?▼

Run `npx skills add ersinkoc/security-check --all -g -y` in your terminal to install all 48 security skills globally. Then just tell your assistant "run security check".

How to scan my codebase for vulnerabilities?▼

After installing, open your coding assistant and say "run security check" or "security audit". It maps your architecture, runs 40+ vulnerability scanners in parallel, verifies findings, and writes a report to security-report/SECURITY-REPORT.md.

Can I scan only my pull request changes?▼

Yes. Say "scan diff" or "PR scan" and it runs a fast targeted scan on changed files only, classifying findings as new versus pre-existing with a PASS/WARN/FAIL verdict.

Which languages and frameworks does security-check support?▼

It includes deep scanners with 400+ item checklists for Go, TypeScript/JavaScript, Python, PHP, Rust, Java/Kotlin, and C#/.NET, plus universal checks for injection, auth, APIs, Docker, Terraform, and CI/CD pipelines.

Does security-check work with Cursor, Codex, and Claude Code?▼

Yes. It follows the agentskills.io standard and works with Claude Code, Cursor, Codex, Gemini CLI, OpenCode, Windsurf, Roo Code, and Amp with no extra configuration.