quality-security-scan

Detect security vulnerabilities and hardcoded secrets in code.

18|5|Updated Nov 3, 2025

Search Tags:#code quality #static analysis #security #vulnerability #secrets #pre-commit #dependency scan

Ready to run

npx skills add https://github.com/mvillmow/ml-odyssey --skill quality-security-scan

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: quality-security-scan
Source: https://github.com/mvillmow/ml-odyssey/tree/main/.claude/skills/quality-security-scan
Command: npx skills add https://github.com/mvillmow/ml-odyssey --skill quality-security-scan

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pip-audit, safety, and includes scripts (resource) components.

What problem does it solve? This Skill automatically detects common security vulnerabilities and hardcoded secrets in your codebase, preventing accidental exposure and strengthening your application's security posture. It automates critical security checks, reducing manual audit time.

Core Features & Use Cases:

Secrets Detection: Scans for API keys, passwords, and private keys before they are committed, preventing sensitive data leaks.
Dependency Vulnerability Check: Integrates with tools like pip-audit and safety to find known vulnerabilities in Python dependencies.
Use Case: Before pushing sensitive code, run this skill to ensure no secrets are accidentally committed and that your Python dependencies are free from known vulnerabilities. This proactive check helps maintain a secure codebase.

Quick Start: Use the quality-security-scan skill to scan the current repository for hardcoded secrets.

Frequently Asked Questions about quality-security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I detect hardcoded secrets in my codebase before committing?▼

Secrets detection scans your code for API keys, passwords, and private keys before they're committed to version control. This Skill automatically identifies hardcoded sensitive data, preventing accidental exposure of credentials to repositories.

Can I scan Python dependencies for known vulnerabilities?▼

Yes. This Skill integrates pip-audit and safety to check Python dependencies against known vulnerability databases. It identifies insecure packages in your project before deployment, reducing exposure to attacks.

How do I integrate security scanning into my pre-commit workflow?▼

Pre-commit hooks run this Skill automatically before commits are accepted, catching secrets and vulnerable dependencies at commit time. This prevents insecure code from ever entering your repository history.

What security checks does this Skill perform on my code?▼

The Skill detects hardcoded secrets, scans Python dependencies for vulnerabilities, and identifies unsafe patterns in your codebase. It covers pre-commit checks, security reviews, and pre-release audits to strengthen your application's security posture.

Does this work with existing Python projects?▼

Yes. The Skill works with any Python project. It requires pip-audit and safety as dependencies but integrates seamlessly through scripts and pre-commit hooks without modifying your existing codebase structure.