Audit local projects for vulnerabilities across code, dependencies, secrets, and infrastructure.
npx skills add https://github.com/Hainrixz/cyber-neo --skill cyber-neo-hainrixz
Please help me install this Agent Skill. Skill: cyber-neo Source: https://github.com/Hainrixz/cyber-neo/tree/main/skills/cyber-neo Command: npx skills add https://github.com/Hainrixz/cyber-neo --skill cyber-neo-hainrixz
This Skill performs a comprehensive security audit of your local project, scanning for vulnerabilities in code, dependencies, secrets, infrastructure, and supply chain.
/cyber-neo command to initiate the scan./cyber-neo to automatically scan your local project and receive a report highlighting critical vulnerabilities and their fixes.Use the cyber-neo skill to perform a security audit of your project by running /cyber-neo in your terminal.
High-intent search queries and answers about installing and using this skill.
A comprehensive security audit scans your local project for vulnerabilities across code, dependencies, secrets, and infrastructure. Using `/cyber-neo` initiates this process across 11 domains, generating a prioritized report with actionable remediation guidance.
Dependency vulnerability scanning in Python and Node.js is performed using `pip-audit` and `npm audit` respectively. The audit also integrates Trivy and cargo audit to detect supply chain and dependency vulnerabilities across multiple project environments.
Yes, you must install Python alongside security tools like Trivy, npm, pip, cargo, and Gitleaks before scanning. These dependencies are required to perform comprehensive vulnerability and secret detection across your local project.
The best way to detect hardcoded secrets is using Gitleaks, which scans your source code for sensitive information. This Skill integrates Gitleaks to identify exposed credentials and includes them in a prioritized report with actionable remediation guidance.
Yes, you can use this security audit for infrastructure and CI/CD configurations. The scan explicitly covers these domains, identifying vulnerabilities and providing prioritized remediation guidance to improve your project's overall security posture.
matteocervelliScan codebases for secrets, vulnerable dependencies, and insecure patterns.
mrkhachaturovAudit dependencies, CI/CD configurations, and webhooks to generate a security posture report.
apacheScan project dependencies for known vulnerabilities and propose upgrades.
mcj-coderConfigure SAST tools, secrets detection, and vulnerability thresholds for CI pipelines.