cyber-neo

Audit local projects for vulnerabilities across code, dependencies, secrets, and infrastructure.

235|27|Updated Apr 12, 2026

Search Tags:#security audit #dependency analysis #cybersecurity #secret detection #vulnerability scanning

Ready to run

npx skills add https://github.com/Hainrixz/cyber-neo --skill cyber-neo-hainrixz

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: cyber-neo
Source: https://github.com/Hainrixz/cyber-neo/tree/main/skills/cyber-neo
Command: npx skills add https://github.com/Hainrixz/cyber-neo --skill cyber-neo-hainrixz

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires python, trivy, npm, pip, cargo, gitleaks, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill performs a comprehensive security audit of your local project, scanning for vulnerabilities in code, dependencies, secrets, infrastructure, and supply chain.

Core Features & Use Cases

Comprehensive Security Audit: Scans 11 security domains including code, dependencies, secrets, authentication, cryptography, configurations, supply chain, and CI/CD.
Prioritized Reports: Generates a prioritized report with actionable remediation guidance.
No Security Expertise Required: Use the /cyber-neo command to initiate the scan.
Use Case: Run /cyber-neo to automatically scan your local project and receive a report highlighting critical vulnerabilities and their fixes.

Quick Start

Use the cyber-neo skill to perform a security audit of your project by running /cyber-neo in your terminal.

Frequently Asked Questions about cyber-neo

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I run a comprehensive security audit on my local project?▼

A comprehensive security audit scans your local project for vulnerabilities across code, dependencies, secrets, and infrastructure. Using `/cyber-neo` initiates this process across 11 domains, generating a prioritized report with actionable remediation guidance.

What tools are used for dependency vulnerability scanning in Python and Node.js projects?▼

Dependency vulnerability scanning in Python and Node.js is performed using `pip-audit` and `npm audit` respectively. The audit also integrates Trivy and cargo audit to detect supply chain and dependency vulnerabilities across multiple project environments.

Do I need to install security tools before scanning my codebase for vulnerabilities and leaked secrets?▼

Yes, you must install Python alongside security tools like Trivy, npm, pip, cargo, and Gitleaks before scanning. These dependencies are required to perform comprehensive vulnerability and secret detection across your local project.

What is the best way to detect hardcoded secrets in my source code?▼

The best way to detect hardcoded secrets is using Gitleaks, which scans your source code for sensitive information. This Skill integrates Gitleaks to identify exposed credentials and includes them in a prioritized report with actionable remediation guidance.

Can I use this security audit for infrastructure and CI/CD pipeline configurations?▼

Yes, you can use this security audit for infrastructure and CI/CD configurations. The scan explicitly covers these domains, identifying vulnerabilities and providing prioritized remediation guidance to improve your project's overall security posture.