b0ase-security-check

Scan Node.js codebases for security vulnerabilities and report remediation steps.

Updated Feb 8, 2026
One-click install
npx skills add https://github.com/b0ase/path401-com --skill b0ase-security-check
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: b0ase-security-check
Source: https://github.com/b0ase/path401-com/tree/main/.claude/skills/security-check
Command: npx skills add https://github.com/b0ase/path401-com --skill b0ase-security-check

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Red-team penetration testing and security analysis before releases to uncover vulnerabilities and permission gaps.

Core Features & Use Cases

  • Adversarial security testing across authentication, authorization, input handling, API endpoints, and configuration.
  • Comprehensive checklists, prompts, and guided exercises to identify exploitable weaknesses early in the software lifecycle.
  • Automated security scanning integrated into development workflows to guide pre-commit and pre-deploy reviews.

Quick Start

Run the security-check scanner against your project to surface critical findings and remediation guidance.

Frequently Asked Questions about b0ase-security-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security check on my Node.js project before committing code?

To run a security check, execute the automated scanner against your Node.js project to surface vulnerabilities. It analyzes authentication, input handling, API endpoints, and dependencies, reporting findings with severity levels and remediation steps.

What is pre-commit code scanning and how does it prevent deploy vulnerabilities?

Pre-commit code scanning is an automated process that identifies exploitable weaknesses in your codebase before deployment. It targets misconfigurations and permission gaps using a structured ruleset to guide red-team security reviews early in the lifecycle.

Can I use automated penetration testing for Node.js API endpoints and authentication?

Yes, you can use automated penetration testing to perform adversarial security analysis across Node.js API endpoints and authentication flows. The scanner identifies exploitable weaknesses and surfaces critical findings with guided remediation recommendations.

Does this security scanner check for dependency vulnerabilities and misconfigurations?

Yes, the security scanner checks for dependency vulnerabilities and misconfigurations across your codebase. It implements comprehensive best-practice checklists to identify permission gaps and security flaws, providing structured reports on severity and remediation.

What's the best way to integrate red-team security testing into a development workflow?

The best way to integrate red-team security testing is by running automated preflight checks before commits and deploys. This surfaces critical vulnerabilities in input handling and API exposure early, guiding developers with actionable remediation steps.

Why does my automated security check report severity findings without context?

Security checks report severity findings alongside recommendations and remediation steps to provide context. The structured ruleset evaluates APIs, dependencies, and configurations, ensuring developers understand the exploitable weaknesses and how to fix them.