secure-check

Name: secure-check
Availability: InStock
Author: Junghwan

Detect vulnerabilities and secrets in codebases during CI/CD pipelines.

Updated Feb 14, 2026

Search Tags:#security #vulnerability #owasp #audit #code-review #secrets-detection #dependency-security

Ready to run

npx skills add https://github.com/shaun0927/codex-superskills --skill secure-check

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: secure-check
Source: https://github.com/shaun0927/codex-superskills/tree/main/skills/security-review
Command: npx skills add https://github.com/shaun0927/codex-superskills --skill secure-check

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Thorough, repeatable security audits to identify vulnerabilities, insecure patterns, and secrets leakage in codebases.

Core Features & Use Cases

OWASP Top 10 Scan covering A01-A10 critical areas.
Secrets Detection for hardcoded keys, credentials, and tokens.
Input Validation Review to ensure untrusted data is sanitized and safeguarded.
Dependency Security checks for vulnerable or outdated components.
Remediation Guidance with actionable fixes and references.

Quick Start

Run the security check on your codebase to generate a comprehensive report.

Frequently Asked Questions about secure-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I perform an OWASP Top 10 security audit on my codebase?▼

Perform an OWASP Top 10 security audit by running an automated codebase review that checks A01-A10 critical areas, detecting insecure patterns and vulnerabilities to generate a remediation-ready report.

Can I automate secrets detection for hardcoded credentials during a code review?▼

Automate secrets detection during code reviews to identify hardcoded keys, credentials, and tokens embedded in the codebase, preventing accidental leakage in your deployment pipeline.

What is the best way to check dependency security for vulnerable components?▼

Check dependency security by running an automated review that scans your codebase for vulnerable or outdated components, ensuring your application relies on safe, patched libraries.

Does this security review provide guidance on fixing input validation vulnerabilities?▼

This security review assesses input validation to ensure untrusted data is sanitized, and provides remediation guidance with actionable fixes and references to safeguard your application.

Can I integrate automated vulnerability scanning into a CI/CD pipeline?▼

Integrate automated vulnerability scanning into CI/CD pipelines, code reviews, and pre-deployment audits across multiple languages and frameworks to continuously identify security flaws before release.

What limitations should I expect when running an automated codebase security audit?▼

Limitations of an automated codebase security audit include relying on pattern recognition for known vulnerabilities like OWASP Top 10 flaws, meaning complex business logic errors may require manual code review.