Audit codebases for OWASP Top 10, dependency CVEs, and secret patterns.
npx skills add https://github.com/ShaheerKhawaja/ProductionOS --skill pos-security
Please help me install this Agent Skill. Skill: pos-security Source: https://github.com/ShaheerKhawaja/ProductionOS/tree/main/skills/pos-security Command: npx skills add https://github.com/ShaheerKhawaja/ProductionOS --skill pos-security
Security teams and developers spend excessive time auditing code for OWASP top risks, identifying vulnerable dependencies, and remediating secrets and misconfigurations across large codebases. pos-security addresses this by providing a unified security pipeline with memory of past findings to improve over time.
To begin, run an audit on your target path to trigger the end-to-end security workflow.
High-intent search queries and answers about installing and using this skill.
You can audit codebases for OWASP Top 10 vulnerabilities and dependency CVEs by running an automated security scan that checks authentication, input validation, and dependencies, producing a prioritized remediation plan.
Detecting hardcoded secrets and misconfigurations across large projects requires an automated secret pattern scanning workflow that stores findings in a persistent memory store to track recurring issues across sessions.
Yes, you can run dependency vulnerability scanning and hardening within CI/CD pipelines or manual runs, applying security workflows across projects of any size while tracking findings for cross-session learning.
Persistent vulnerability memory improves future security scans and hardening fixes by retaining past audit findings in a local store, creating a feedback loop that guides subsequent remediation workflows and tracks recurring issues.
Yes, the security audit workflow supports mapping findings to compliance frameworks where applicable, allowing you to align OWASP-based code audits, dependency CVE scans, and secret detection with regulatory requirements.
justSteveStore, retrieve, and reason over experiential memories using AgentDB.
MapleTechLabsScan React codebases for vulnerabilities, bottlenecks, and architectural flaws.
xlelibertyAutomate security scanning, CVE assessment, and compliance verification for software projects.
devendrapratapsinghScan code, containers, and infrastructure for security vulnerabilities.
