What problem does it solve?
This Skill proactively identifies and helps manage security vulnerabilities (CVEs) within project dependencies, source code, and documentation, preventing accidental leaks and ensuring responsible disclosure.
Core Features & Use Cases
- Dependency Scanning: Detects known CVEs in project dependencies across various manifest files (e.g.,
pyproject.toml, package.json, go.mod, Dockerfiles, Helm charts).
- Code Security Review: Analyzes source code for common security flaws like authentication issues, injection vulnerabilities, and secrets exposure.
- Documentation Audit: Scans Markdown files to prevent accidental disclosure of CVE IDs or vulnerability details.
- Disclosure Planning: Assists in planning the responsible disclosure process for identified vulnerabilities.
- Use Case: Before merging a new feature branch, this skill automatically scans all new dependencies and code changes for potential CVEs. If any are found, it flags them and initiates a planning process for disclosure, preventing the code from being pushed publicly until the vulnerability is handled.
Quick Start
Scan the current project for any security vulnerabilities and documentation leaks.