skills.rest
lengo0951
lengo0951COMMUNITY
Explore all skills by this author →
𝕏@quocngo04GitHub

ck:security-scan

Scan codebases for vulnerabilities, hardcoded secrets, and dependency issues.

Updated Apr 18, 2026
Search Tags:#OWASP#security scan#secret detection#vulnerability detection#dependency auditing
One-click install
npx skills add https://github.com/lengo0951/pms --skill ck-security-scan-lengo0951
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ck:security-scan
Source: https://github.com/lengo0951/pms/tree/main/.claude/skills/security-scan
Command: npx skills add https://github.com/lengo0951/pms --skill ck-security-scan-lengo0951

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automatically scans codebases for security vulnerabilities, hardcoded secrets, dependency issues, and OWASP patterns, providing a comprehensive security check in a single command.

Core Features & Use Cases

  • Security Vulnerability Detection: Identifies potential security risks in code, such as SQL injection, XSS, command injection, and others.
  • Secret Detection: Discovers hardcoded credentials, API keys, and other sensitive information in the codebase.
  • Dependency Auditing: Checks for outdated dependencies and known vulnerabilities in dependencies.
  • Use Case: Before a major release, run the ck:security-scan command to ensure that the codebase is secure and free from common vulnerabilities.

Quick Start

Perform a full security scan of the current project using: /ck:security-scan

Frequently Asked Questions about ck:security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for hardcoded secrets and security vulnerabilities?▼

Yes, you can run a dependency audit for Node.js and Python projects using this security scan. It utilizes npm audit and pip audit to check for outdated dependencies and known vulnerabilities in your project.

Does automated security scanning support Go and Rust codebases?▼

Dependency auditing is the process of checking your project's dependencies for known vulnerabilities and outdated packages. This security scan runs npm audit and pip audit to identify these risks before a major release.

What's the best way to check for OWASP vulnerabilities before a release?▼

The best way to check for OWASP vulnerabilities before a release is to run an automated security scan. It identifies risks like command injection and XSS, providing a comprehensive pre-release security check in a single command.

Do I need Claude reasoning and shell tools to run an automated security scan?▼

Yes, you need Claude reasoning and shell tools to run this automated security scan. The Skill requires these components to execute grep for secret detection and to run dependency auditing commands.

Related Skills

Explore More Software Engineering Skills→
ohare93ohare93
15

sandbox-setup

Detect repository toolchains and configure Claude Code sandbox permissions in .claude/settings.json.

Community
Intermediate
sugarforeversugarforever
131

Next.js Security Scan

Scan Next.js and TypeScript/JavaScript projects for security vulnerabilities.

Community
Advanced
PriyanshKuniyalPriyanshKuniyal

sast-configuration

Configures and manages SAST tools for automated vulnerability detection in CI/CD pipelines.

Community
Advanced
summarybotngsummarybotng
2

security-testing

Scan code, dependencies, and configurations for OWASP Top 10 vulnerabilities.

Official
Advanced