Scan code diffs for security risks and generate fix-and-teach blocks.
npx skills add https://github.com/mrdulasolutions/DevLearn --skill devlearn-security
Please help me install this Agent Skill. Skill: devlearn-security Source: https://github.com/mrdulasolutions/DevLearn/tree/main/devlearn-security Command: npx skills add https://github.com/mrdulasolutions/DevLearn --skill devlearn-security
Helps you prevent real security failures while coding by teaching secure patterns for secrets, authentication, XSS/injection risks, dependency hygiene, HTTPS, and error leakage.
.env, client-bundled API keys, unsafe HTML rendering, injection-prone SQL, missing HTTPS, verbose production errors, missing auth on sensitive routes, and risky dependencies.Ask your AI agent to run /devlearn-security to review the current diff for secrets, auth gaps, XSS/injection risks, dependency issues, HTTPS enforcement, and production error leakage, then produce the fix steps and a short teach-back lesson.
High-intent search queries and answers about installing and using this skill.
Run a security review on your current diff to identify committed secrets, missing auth on sensitive routes, and unsafe rendering. The scan produces triage output and fix steps to mitigate application security risks before release.
Prevent XSS and SQL injection by scanning user input rendering and database queries during security review. The process detects unsafe HTML rendering and injection-prone SQL, then generates minimal fixes and a teach-back lesson on secure coding patterns.
Check dependencies for supply-chain risks by including them in your pre-release security pass. The review flags risky dependencies alongside other high-signal issues and routes results to a checklist with lifecycle handoffs for remediation.
Yes, the security review is designed for diffs touching crypto, payments, auth, and user input rendering. It applies scenario-based triage to identify information leakage, insecure transport, and other application security risks specific to sensitive features.
Redact exposed API keys and enforce HTTPS by following the fix-and-teach workflow. It prioritizes stopping active secret leaks first, applies minimal fixes for missing HTTPS, and generates persona-tailored lessons to prevent future exposure.
mrvonkalusScan source files, configurations, and dependencies for security vulnerabilities.
clawpod-appGenerates a deployment readiness checklist for pre-release verification.
randAutomatically activate deployment skills for Netlify, Heroku, and CI/CD workflows.
igbuendDetect AI-hallucinated software packages and verify legitimacy in official registries.