skills.rest
GDSDN
GDSDNCOMMUNITY
Explore all skills by this author →
GitHub

qa-security-checklist

Scan codebases for predefined vulnerability patterns and generate severity reports.

3|Updated Feb 7, 2026
Search Tags:#static analysis#code review#security#qa#compliance#vulnerability scanning
One-click install
npx skills add https://github.com/GDSDN/kord-aios --skill qa-security-checklist
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: qa-security-checklist
Source: https://github.com/GDSDN/kord-aios/tree/main/src/features/builtin-skills/kord-aios/qa/qa-security-checklist
Command: npx skills add https://github.com/GDSDN/kord-aios --skill qa-security-checklist

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the process of identifying common security vulnerabilities within codebases, helping to prevent critical security flaws before they reach production.

Core Features & Use Cases

  • Automated Vulnerability Scanning: Scans code for patterns indicative of critical security risks like RCE, XSS, SQL Injection, and hardcoded secrets.
  • Configurable Modes: Supports autonomous scanning, interactive educational modes, and comprehensive pre-flight planning.
  • Use Case: Integrate this Skill into your CI/CD pipeline to automatically flag potential security issues in pull requests, ensuring code quality and security compliance.

Quick Start

Run the security-check skill for story ID '6.3' to scan modified files for vulnerabilities.

Frequently Asked Questions about qa-security-checklist

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate vulnerability scanning for Remote Code Execution and Cross-Site Scripting in my codebase?▼

Automated vulnerability scanning detects predefined risk patterns for RCE, XSS, and SQL Injection across multiple programming languages. It exposes hardcoded secrets and critical flaws before code reaches production environments.

How do I integrate security audits into a CI/CD pipeline for pull requests?▼

Integrate security audits into CI/CD pipelines to automatically flag potential vulnerabilities in pull requests. This enforces code quality and security compliance by preventing vulnerable code from merging into main branches.

Does automated static analysis provide severity classifications and remediation suggestions for security flaws?▼

Static analysis provides detailed reports containing severity classifications and remediation suggestions. It categorizes identified vulnerabilities so developers can prioritize security fixes based on the potential impact of each flaw.

Can I run an interactive security scan to review code compliance rather than fully autonomous scanning?▼

Interactive educational modes are supported alongside autonomous scanning to review code compliance. Configurable scanning modes adapt to different security audit requirements and developer learning contexts within the same workflow.

What types of exposed secrets and command injection risks can code review automation detect before deployment?▼

Code review automation detects exposed secrets and command injection risks by scanning for predefined vulnerability patterns. It identifies hardcoded credentials and malicious execution vectors across multiple programming languages before deployment.

Related Skills

Explore More Software Engineering Skills→
robbytrobbyt
42

diff-review

Review git diffs for bugs, security issues, and style problems.

Community
Advanced
CuriousLearnerCuriousLearner
27

dependency-auditor

Audit project dependencies for vulnerabilities, outdated packages, and license issues.

Community
Advanced
erichowenserichowens
181

security-auditor

Identifies security vulnerabilities in codebases and dependencies across multiple languages.

Community
Advanced
DevHive1DevHive1
18

security_scan

Orchestrate dependency, static analysis, and privacy dataflow scanners into prioritized reports.

Community
Advanced