skills.rest
mvillmow
mvillmowCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

quality-security-scan

Detect security vulnerabilities and hardcoded secrets in code.

18|5|Updated Nov 3, 2025
Search Tags:#code quality#static analysis#security#vulnerability#secrets#pre-commit#dependency scan
One-click install
npx skills add https://github.com/mvillmow/ml-odyssey --skill quality-security-scan
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: quality-security-scan
Source: https://github.com/mvillmow/ml-odyssey/tree/main/.claude/skills/quality-security-scan
Command: npx skills add https://github.com/mvillmow/ml-odyssey --skill quality-security-scan

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pip-audit, safety, and includes scripts (resource) components.

What problem does it solve? This Skill automatically detects common security vulnerabilities and hardcoded secrets in your codebase, preventing accidental exposure and strengthening your application's security posture. It automates critical security checks, reducing manual audit time.

Core Features & Use Cases:

  • Secrets Detection: Scans for API keys, passwords, and private keys before they are committed, preventing sensitive data leaks.
  • Dependency Vulnerability Check: Integrates with tools like pip-audit and safety to find known vulnerabilities in Python dependencies.
  • Use Case: Before pushing sensitive code, run this skill to ensure no secrets are accidentally committed and that your Python dependencies are free from known vulnerabilities. This proactive check helps maintain a secure codebase.

Quick Start: Use the quality-security-scan skill to scan the current repository for hardcoded secrets.

Frequently Asked Questions about quality-security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect hardcoded secrets in my codebase before committing?▼

Secrets detection scans your code for API keys, passwords, and private keys before they're committed to version control. This Skill automatically identifies hardcoded sensitive data, preventing accidental exposure of credentials to repositories.

Can I scan Python dependencies for known vulnerabilities?▼

Yes. This Skill integrates pip-audit and safety to check Python dependencies against known vulnerability databases. It identifies insecure packages in your project before deployment, reducing exposure to attacks.

How do I integrate security scanning into my pre-commit workflow?▼

Pre-commit hooks run this Skill automatically before commits are accepted, catching secrets and vulnerable dependencies at commit time. This prevents insecure code from ever entering your repository history.

What security checks does this Skill perform on my code?▼

The Skill detects hardcoded secrets, scans Python dependencies for vulnerabilities, and identifies unsafe patterns in your codebase. It covers pre-commit checks, security reviews, and pre-release audits to strengthen your application's security posture.

Does this work with existing Python projects?▼

Yes. The Skill works with any Python project. It requires pip-audit and safety as dependencies but integrates seamlessly through scripts and pre-commit hooks without modifying your existing codebase structure.

Related Skills

Explore More Software Engineering Skills→
PaulKinlanPaulKinlan
2

project-setup

Initialize new software projects with directories, package managers, and Git.

Community
Intermediate
curiositechcuriositech
181

security-auditor

Scan codebases for dependency CVEs, exposed secrets, and OWASP Top 10 issues.

Official
Advanced
Jaydpatel01Jaydpatel01

code-quality-and-review

Enforce code correctness, readability, and safety with linters and type checkers.

Community
Advanced
voidrotvoidrot

sast-configuration

Configure SAST tools like Semgrep, CodeQL, and SonarQube for CI/CD pipelines.

Community
Intermediate