Audit repositories for secret handling, webview boundaries, persistence, and logging redaction.
npx skills add https://github.com/enyst/OpenHands-Tab --skill audit-enyst
Please help me install this Agent Skill. Skill: audit Source: https://github.com/enyst/OpenHands-Tab/tree/main/.openhands/skills/audit Command: npx skills add https://github.com/enyst/OpenHands-Tab --skill audit-enyst
This Skill automates the process of conducting security audits on code repositories, identifying potential vulnerabilities and ensuring best practices are followed.
/audit command to ensure no secrets are accidentally exposed in logs or configuration files.Run a security audit on the current repository using the /audit command.
High-intent search queries and answers about installing and using this skill.
To run a security audit, execute the /audit command against your repository. This triggers an automated checklist that analyzes provider API key names, extension-managed secret keys, and confirms secrets are not persisted in VS Code settings.
An automated code audit checks for secret handling vulnerabilities, webview and host boundary security, persistence configurations, and logging redaction. It assesses repository-specific risks to ensure secrets are not exposed in logs or configuration files.
Yes, this audit skill performs threat modeling specifically tailored for VS Code extensions. It assesses context-specific risks by verifying webview boundaries are secure and profile persistence excludes managed secrets.
To ensure secrets are not exposed, run an audit to verify logging is properly redacted and webview boundaries are secure. The audit confirms provider API keys and extension-managed secrets are excluded from VS Code settings persistence.
The best way to check if secrets are persisted in VS Code settings is to run an automated repository audit. It analyzes provider API key names and extension-managed secret keys to confirm they are not accidentally saved in configuration files.
gaebalaiScan codebases for leaked API keys, tokens, and passwords.
masermediagroup-stackIdentify and remediate security vulnerabilities in code, configuration, and dependencies.
olafkfreundManage multi-host NixOS configurations with flakes and Just commands.
Dev-Dennis-040Identify and mitigate security risks in web and cloud-native applications.