qa-security-checklist

Name: qa-security-checklist
Availability: InStock
Author: GDSDN

Scan codebases for predefined vulnerability patterns and generate severity reports.

3|Updated Feb 7, 2026

Search Tags:#static analysis #code review #security #qa #compliance #vulnerability scanning

Ready to run

npx skills add https://github.com/GDSDN/kord-aios --skill qa-security-checklist

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: qa-security-checklist
Source: https://github.com/GDSDN/kord-aios/tree/main/src/features/builtin-skills/kord-aios/qa/qa-security-checklist
Command: npx skills add https://github.com/GDSDN/kord-aios --skill qa-security-checklist

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the process of identifying common security vulnerabilities within codebases, helping to prevent critical security flaws before they reach production.

Core Features & Use Cases

Automated Vulnerability Scanning: Scans code for patterns indicative of critical security risks like RCE, XSS, SQL Injection, and hardcoded secrets.
Configurable Modes: Supports autonomous scanning, interactive educational modes, and comprehensive pre-flight planning.
Use Case: Integrate this Skill into your CI/CD pipeline to automatically flag potential security issues in pull requests, ensuring code quality and security compliance.

Quick Start

Run the security-check skill for story ID '6.3' to scan modified files for vulnerabilities.

Frequently Asked Questions about qa-security-checklist

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate vulnerability scanning for Remote Code Execution and Cross-Site Scripting in my codebase?▼

Automated vulnerability scanning detects predefined risk patterns for RCE, XSS, and SQL Injection across multiple programming languages. It exposes hardcoded secrets and critical flaws before code reaches production environments.

How do I integrate security audits into a CI/CD pipeline for pull requests?▼

Integrate security audits into CI/CD pipelines to automatically flag potential vulnerabilities in pull requests. This enforces code quality and security compliance by preventing vulnerable code from merging into main branches.

Does automated static analysis provide severity classifications and remediation suggestions for security flaws?▼

Static analysis provides detailed reports containing severity classifications and remediation suggestions. It categorizes identified vulnerabilities so developers can prioritize security fixes based on the potential impact of each flaw.

Can I run an interactive security scan to review code compliance rather than fully autonomous scanning?▼

Interactive educational modes are supported alongside autonomous scanning to review code compliance. Configurable scanning modes adapt to different security audit requirements and developer learning contexts within the same workflow.

What types of exposed secrets and command injection risks can code review automation detect before deployment?▼

Code review automation detects exposed secrets and command injection risks by scanning for predefined vulnerability patterns. It identifies hardcoded credentials and malicious execution vectors across multiple programming languages before deployment.