Run security scanners and gate checks to triage and remediate codebase vulnerabilities.
npx skills add https://github.com/vinceferro/claude-kickoff --skill harden-vinceferro
Please help me install this Agent Skill. Skill: harden Source: https://github.com/vinceferro/claude-kickoff/tree/main/plugin/skills/harden Command: npx skills add https://github.com/vinceferro/claude-kickoff --skill harden-vinceferro
This skill bridges the gap between identifying security vulnerabilities and actually fixing them, allowing non-technical operators to resolve structural issues and leaked secrets safely.
Run the harden skill to perform a health check on the current repository and address any identified security findings.
High-intent search queries and answers about installing and using this skill.
Automated code security triage is performed by running scanners and gate-check commands to identify vulnerabilities and leaked secrets. The skill then guides you through a structured workflow to remediate structural issues like broad permissions and unhandled promises before they reach production.
Finding and removing leaked secrets requires integrating local secret-scanning tools to execute health checks on your repository. The skill identifies exposed credentials and provides a guided remediation workflow to safely remove them before they reach production.
Yes, lefthook is required to run automated security checks on your codebase. The skill depends on lefthook to enforce gate-check commands alongside local linting, testing, and secret-scanning tools to ensure code integrity behind a review gate.
Yes, you can use this to fix structural security vulnerabilities through guided remediation. It bridges the gap between identifying vulnerabilities and fixing them, allowing non-technical operators to safely resolve structural issues and remove leaked credentials.
Automated security hardening requires local linting and testing tools to validate code integrity behind a review gate. The skill operates by executing scanners and gate-check commands, relying on these local tools to safely triage and resolve identified vulnerabilities.
You should run automated security triage at the start of a development session. Running the health check early ensures that any newly introduced security risks, such as leaked secrets or broad permissions, are identified and mitigated before reaching production.
RoxabiAutomate CI/CD pipeline setup with GitHub Actions, TruffleHog, and Dependabot.
Mohammed-AbdelhadyRun pre-push gates and confirm before pushing code.
baphledRun linting, formatting, security scans, and tests before committing code.
erikliebenAutomate OWASP Top 10:2025 security reviews for .NET and Angular applications.
