commit-security

Scan commits for security risks and hardcoded secrets with CWE mapping.

Updated Aug 27, 2026
One-click install
npx skills add https://github.com/ferundatattoo/ethereal --skill commit-security
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: commit-security
Source: https://github.com/ferundatattoo/ethereal/tree/main/.claude/skills/commit-security
Command: npx skills add https://github.com/ferundatattoo/ethereal --skill commit-security

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Pre-commit security scanning helps prevent leaking secrets and introducing vulnerabilities by enforcing checks before code is committed.

Core Features & Use Cases

  • Hardcoded secrets detection and CWE mapping to categorize findings.
  • Detection of SQL injection, XSS, and authentication bypass patterns.
  • Automatic blocking of CRITICAL findings and warnings for HIGH/MEDIUM with clear remediation guidance.

Quick Start

Configure your repository to run the pre-commit hook that executes this security scan on every commit.

Frequently Asked Questions about commit-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enforce pre-commit security checks to prevent hardcoded secrets in git commits?

Pre-commit security scanning prevents leaking secrets by configuring your repository to run a pre-commit hook that detects hardcoded secrets and blocks commits containing critical findings.

What is CWE mapping when scanning code for vulnerabilities like SQL injection and XSS?

CWE mapping categorizes detected security risks, such as SQL injection, XSS vectors, and authentication bypass attempts, by mapping the findings to standardized CWE categories for clear remediation.

How do I stop a git commit automatically if critical security vulnerabilities are detected?

To stop a git commit, configure a pre-commit hook to execute a security scan; it will automatically block commits with CRITICAL findings and issue warnings for HIGH and MEDIUM severity risks.

Can I use pre-commit hooks to detect authentication bypass patterns in any code repository?

Yes, pre-commit hooks can detect authentication bypass patterns in any code repository by executing security scans on every commit, ensuring vulnerabilities are caught before introduction.

Does pre-commit vulnerability detection provide guidance for fixing HIGH and MEDIUM security warnings?

Pre-commit vulnerability detection provides clear remediation guidance for HIGH and MEDIUM security warnings, allowing developers to understand and address detected risks without blocking the commit.