scan-security

What problem does it solve?

Identifies security vulnerabilities in codebases during assessments by detecting hardcoded secrets, risky eval usage, and SQL injection risks, helping teams prevent insecure releases.

Core Features & Use Cases

• Hardcoded secrets discovery across codebases to reduce credential leakage.
• Detection of unsafe eval usage and dynamic code execution patterns.
• SQL injection risk screening and guidance for secure remediation.
• Excludes running during post-commit or active implementation phases to avoid interference.
• Generates actionable findings and remediation guidance for security reviews.

Quick Start

Run the Windsurf security scan and paste the full terminal results into the Windsurf task log.