Scan repository files for secrets and structural code weaknesses.
npx skills add https://github.com/vinceferro/claude-kickoff --skill scan-vinceferro
Please help me install this Agent Skill. Skill: scan Source: https://github.com/vinceferro/claude-kickoff/tree/main/plugin/skills/scan Command: npx skills add https://github.com/vinceferro/claude-kickoff --skill scan-vinceferro
This skill addresses the risk of shipping code with exposed secrets or structural vulnerabilities by providing an automated, language-agnostic audit of your repository.
Run the scan skill to audit the current repository for any structural issues or exposed secrets.
High-intent search queries and answers about installing and using this skill.
To scan for exposed secrets and security vulnerabilities, run an automated, language-agnostic audit on your repository. This detects and redacts leaked credentials, private keys, and tokens before deployment to prevent shipping insecure code.
Yes, you can detect structural code weaknesses like insecure database queries automatically. The scanner analyzes repository files for architectural footguns, including oversized files and missing error handling, providing ranked findings for immediate remediation.
Yes, you need git and standard Unix coreutils to run this repository security audit. The tool performs non-destructive heuristic analysis across diverse project environments by relying on these foundational command-line utilities.
The best way to check a codebase for leaked credentials before deployment is to run an automated audit at the start of your session. This ensures your codebase is free of common security and stability hazards using non-destructive heuristic analysis.
Yes, the code quality scanner supports language-agnostic project environments. It operates across diverse project structures to identify anti-patterns and structural risks without being tied to a specific programming language framework.
AndyAnh174Provide production-ready bash script templates for Linux system administration tasks.
numman-aliAutomate GitHub issue and PR triage with actionable maintenance reports.
blundergoatMap code changes to test suites and identify coverage gaps.
not-subhuOrchestrate dependency audits, static application security testing, and privacy dataflow analysis.
