Detect hardcoded secrets and weak defaults in production applications.
npx skills add https://github.com/iiammae/opero --skill insecure-defaults-iiammae
Please help me install this Agent Skill. Skill: insecure-defaults Source: https://github.com/iiammae/opero/tree/main/.agents/skills/insecure-defaults Command: npx skills add https://github.com/iiammae/opero --skill insecure-defaults-iiammae
The insecure-defaults Skill detects common security issues like hardcoded secrets, weak authentication, and permissive security settings in production applications.
Use the insecure-defaults skill to scan the project for fail-open vulnerabilities.
High-intent search queries and answers about installing and using this skill.
To scan for hardcoded secrets and weak defaults in production applications, use this Skill to perform pattern matching and analysis. It identifies fail-open vulnerabilities and insecure configurations in your codebase before release.
Fail-open vulnerabilities are security flaws where access is granted by default upon system errors. Security auditing detects them by scanning configuration files and templates for permissive settings and weak authentication patterns.
Yes, you can audit Docker configurations and IaC templates for insecure default settings. The Skill examines deployment files to identify hardcoded credentials, weak defaults, and permissive security settings before production release.
Yes, you need Python installed to run the security auditing scripts used for pattern matching and analysis. The Skill also relies on bash, grep, and glob dependencies to examine environment variable handling and secrets management.
The best way to check for weak authentication and permissive security settings before deployment is to run pre-deployment security checks. This Skill analyzes code and configurations to identify hardcoded credentials and weak defaults.
duc01226Audit code changes for security vulnerabilities and OWASP Top 10 alignment.
SuperlendDetect fail-open insecure defaults in application configurations and IaC.
riftzen-bitIdentify and remediate security misconfigurations in Java Spring Boot services.
allsmogTrace data flows and verify vulnerabilities using Code Property Graphs and CPGQL.
