Audit repository security posture across configuration, secrets, dependencies, and tooling.
npx skills add https://github.com/z23cc/cc-code --skill cc-scout-security
Please help me install this Agent Skill. Skill: cc-scout-security Source: https://github.com/z23cc/cc-code/tree/main/skills/cc-scout-security Command: npx skills add https://github.com/z23cc/cc-code --skill cc-scout-security
Enables quick assessment of a repository's security posture by auditing configuration, secrets exposure, dependencies, and scanner setups, without performing code changes.
Run the Security Scout audit to surface configuration issues and remediation guidance.
High-intent search queries and answers about installing and using this skill.
To audit repository security posture, this Skill reviews branch protection, CODEOWNERS, required checks, and access controls to surface misconfigurations, exposed secrets, and insecure dependencies, generating a structured report with remediation recommendations.
A repository security audit checks configuration, secrets exposure, dependency hygiene, and scanner setups. It detects exposed secrets, identifies vulnerable dependencies, and summarizes security scanning configurations to inform remediation plans.
Run the security audit to detect insecure dependencies and configuration issues. It assesses project-level code repositories and CI configurations without performing code changes, outputting remediation guidance for new repo security reviews.
Yes, you can use the security audit for pre-merge checks and ongoing governance audits. It audits repository settings, CODEOWNERS, and scanning tools to produce a structured report highlighting misconfigurations and insecure dependencies.
Yes, the repository security audit requires access to repository settings, CODEOWNERS, and scanning tools. It applies to project-level code repositories and CI configurations to surface misconfigurations and exposed secrets.
The best way to surface misconfigurations is running the security audit, which reviews branch protection, CODEOWNERS, required checks, and access controls, producing a structured report and remediation recommendations without performing code changes.
salmanabdurrahmanAnalyze CI/CD pipeline configurations for injection vectors, secret exposure, and access controls.
Harvest-Forged-CodeAudit codebases for OWASP Top 10 vulnerabilities, hardcoded secrets, and vulnerable dependencies.
zircoteAudit GitHub repositories for security gaps and implement baseline hardening.
DonTiziAutomate security analysis to detect secrets, vulnerabilities, and insecure patterns.
