Audit code changes for security vulnerabilities, secrets, and anti-patterns.
npx skills add https://github.com/TrevorPLam/agency --skill agent-security-trevorplam
Please help me install this Agent Skill. Skill: agent-security Source: https://github.com/TrevorPLam/agency/tree/main/.windsurf/skills/agent-security Command: npx skills add https://github.com/TrevorPLam/agency --skill agent-security-trevorplam
Audits code changes for security vulnerabilities, secrets, and anti-patterns.
Run the security agent on a pull request to automatically scan for secrets, insecure dependencies, and API misuse.
High-intent search queries and answers about installing and using this skill.
You can audit code changes for security by running an automated agent on your pull requests to scan for vulnerabilities, secrets, and insecure dependencies. It specifically targets security-sensitive areas like API routes, sessions, and database queries to identify anti-patterns.
Secret detection and dependency auditing integrate into your CI/CD workflow by running automated security checks across commits and pull requests. This scans for exposed secrets and vulnerable dependencies to enable early remediation before merging code changes.
You should run a security review on pull requests when changes touch security-sensitive areas such as API routes, sessions, or database queries. It should not run for purely UI styling or documentation updates that do not impact security logic.
The best way to identify insecure code anti-patterns in API routes is to use a policy-driven security agent that audits code changes. It detects API misuse and security vulnerabilities in sensitive areas before code is merged into the main branch.
A limitation of automated security checks is that they target security-sensitive areas like API routes and database queries, and should not run for purely UI styling or documentation updates. They support a policy-driven workflow that still requires manual review before merge.
yangqiongGenerate automated CI/CD pipeline configurations in YAML for GitHub Actions and GitLab CI/CD.
JFrangelDetects and remediates security vulnerabilities in code, infrastructure, and architecture using OWASP and DevSecOps standards for pre-production environments.
SKY-lvScan code, dependencies, and configurations for security vulnerabilities.
cogikyoRefactor Go and TypeScript/React codebases for readability and organization.
