secure

Scan codebases for OWASP Top 10 security vulnerabilities with parallel agents.

1|2|Updated Mar 6, 2026
One-click install
npx skills add https://github.com/cinjoff/fhhs-skills --skill secure-cinjoff
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: secure
Source: https://github.com/cinjoff/fhhs-skills/tree/main/.claude/skills/secure
Command: npx skills add https://github.com/cinjoff/fhhs-skills --skill secure-cinjoff

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill proactively identifies and flags potential security vulnerabilities within your codebase, helping to prevent security breaches and protect sensitive data.

Core Features & Use Cases

  • OWASP Top 10 Scanning: Detects common security risks like injection flaws, broken authentication, and data exposure.
  • Automated Triage: Classifies findings by severity (Critical, High, Medium, Low) to prioritize remediation efforts.
  • Use Case: Before merging a new feature, run this security scan to ensure no critical vulnerabilities are introduced, safeguarding your application and user data.

Quick Start

Run a security scan on the current changes to check for OWASP Top 10 vulnerabilities.

Frequently Asked Questions about secure

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for OWASP Top 10 vulnerabilities?

To scan for OWASP Top 10 vulnerabilities, the Skill analyzes your codebase using parallel agents to identify injection flaws, authentication issues, data exposure risks, and access control misconfigurations. It outputs structured findings to flag potential security risks.

What is the best way to check code for injection flaws and broken authentication before merging?

Checking code for injection flaws and broken authentication before merging is handled by running an automated security scan. It triages identified vulnerabilities by severity (Critical, High, Medium, Low) to prioritize remediation efforts and safeguard user data.

Does the security vulnerability scan require any external dependencies or tools?

The security vulnerability scan requires no external dependencies or tools to operate. It functions independently using parallel subagent execution to detect common security risks and format structured reporting for findings.

Can I automate security compliance checks for access control misconfigurations?

Automating security compliance checks for access control misconfigurations is supported by the Skill's automated triage system. It classifies detected vulnerabilities by severity, allowing you to prioritize remediation efforts before introducing new features.

How are security vulnerability findings reported and classified?

Security vulnerability findings are reported using structured output formatting generated by parallel agents. The automated triage classifies each detected vulnerability by severity levels—Critical, High, Medium, or Low—to help prioritize remediation efforts.