Detect hardcoded secrets, unsafe eval, and SQL injection risks in codebases.
npx skills add https://github.com/TrevorPLam/agency --skill scan-security
Please help me install this Agent Skill. Skill: scan-security Source: https://github.com/TrevorPLam/agency/tree/main/.windsurf/skills/scan-security Command: npx skills add https://github.com/TrevorPLam/agency --skill scan-security
Identifies security vulnerabilities in codebases during assessments by detecting hardcoded secrets, risky eval usage, and SQL injection risks, helping teams prevent insecure releases.
Run the Windsurf security scan and paste the full terminal results into the Windsurf task log.
High-intent search queries and answers about installing and using this skill.
To scan a codebase for hardcoded secrets and SQL injection risks, run the security scan to execute pattern-based searches across repositories. It identifies unsafe eval usage and generates per-finding hashes appended to tasks/issues.md with a structured remediation template.
Detecting unsafe eval usage during a security assessment requires pattern-based searches across your deployed components and CI workflows. This approach identifies dynamic code execution vulnerabilities and generates actionable remediation guidance for security reviews.
No, this security scan does not work during post-commit or active implementation phases. It explicitly excludes running during these stages to avoid interfering with active development processes.
You track vulnerability findings across repository scans by generating per-finding hashes. The scan appends these unique identifiers with a structured remediation template directly to tasks/issues.md.
You exclude security scans from the post-commit phase to avoid interfering with active implementation. Running vulnerability detection during active development disrupts workflows and generates noise.
iVintikLog and track plugin issues in a structured ISSUES.md file.
bswrundquistScan codebases for security vulnerabilities and prioritize findings by severity.
philo-grovesAuthor and execute OpenGrep rules for static application security testing.
camoneartConfigure Semgrep, SonarQube, and CodeQL for automated vulnerability detection in CI/CD pipelines.
