Detect and categorize security vulnerabilities across web application codebases.
npx skills add https://github.com/hidonguyen/trade-ops --skill ck-security-hidonguyen
Please help me install this Agent Skill. Skill: ck:security Source: https://github.com/hidonguyen/trade-ops/tree/main/.opencode/skills/ck-security Command: npx skills add https://github.com/hidonguyen/trade-ops --skill ck-security-hidonguyen
This Skill automates a structured security audit to find, categorize, and prioritize vulnerabilities across a codebase, reducing manual review time and surfacing critical risks before release.
Run ck:security on the src/ directory to produce a severity-ranked findings report and optionally apply iterative fixes with --fix and --iterations.
High-intent search queries and answers about installing and using this skill.
To find and fix security vulnerabilities, you can run an automated audit that scans source files, configurations, and dependencies for OWASP Top 10 issues and hardcoded secrets, producing a severity-ranked report with optional iterative auto-fixes.
STRIDE analysis systematically evaluates spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege risks, mapping discovered vulnerabilities directly to OWASP Top 10 categories for structured triage and remediation.
Scanning for hardcoded secrets and dependency vulnerabilities involves using regex pattern matching to detect exposed credentials and running stack-appropriate dependency audits to identify at-risk packages, outputting structured findings for remediation.
You can automatically apply security fixes using an iterative approach that applies prioritized remediations, runs guard checks, and commits changes, stopping safely if a regression is detected to protect existing functionality.
Running a pre-release security audit involves scanning the project directory to identify critical secrets and injection risks, generating a severity-ranked findings report, and optionally applying safe automated remediations before release.
The security audit targets the entire project directory by scanning source files, configuration files, and dependencies to ensure comprehensive coverage of web application vulnerabilities and hardcoded secrets.
cyperx84Scan source code, dependencies, and infrastructure for security vulnerabilities.
tbartel74Automate OWASP Top 10 checks, secret detection, and dependency audits for Vigil Guard services.
hotriluanDetect secrets, vulnerable dependencies, and insecure code patterns in codebases.
OWASPDetect hardcoded secrets in source code and configuration files.
