build-loop:security-scan

Automated security scanning identifies common vulnerabilities like secrets, SQL injection, and SSRF before a push. This Skill runs a deterministic scan on your repository and blocks pushes containing HIGH severity findings from entering the main codebase.

An automated code repository scan detects secrets, SQL injection, SSRF, rate limiting issues, missing security headers, and other common vulnerabilities. Findings are classified into LOW, MEDIUM, and HIGH severity levels to help prioritize remediation efforts.

A pre-push security gate blocks code pushes when HIGH severity findings are detected during the automated vulnerability assessment. This ensures that critical security issues are addressed promptly before any insecure code is merged into the main repository.

Yes, you can run this OWASP security scan without external dependencies. It uses a deterministic, model-independent scanner that requires no additional packages, executing directly via a Python script to assess repository code quality and security.

Classifying security findings by severity involves categorizing detected vulnerabilities into LOW, MEDIUM, and HIGH levels. This automated scanner evaluates repository code and assigns severity ratings to help developers prioritize security fixes effectively.

To run a security scan on your current repository, execute the Python scanner script with the repository path as an argument. This triggers an automated vulnerability assessment to identify security issues before you push changes.