Run pre-deploy security reviews across nine domains with automated scanners.
npx skills add https://github.com/QuestionPilot/authored-skills --skill secure-ship
Please help me install this Agent Skill. Skill: secure-ship Source: https://github.com/QuestionPilot/authored-skills/tree/main/skills/secure-ship Command: npx skills add https://github.com/QuestionPilot/authored-skills --skill secure-ship
This Skill provides a comprehensive pre-deploy secure-development review for code changes, ensuring changes are safe to merge and deploy.
Run the secure-ship skill on your code changes before merging.
High-intent search queries and answers about installing and using this skill.
A pre-deploy secure-development review scans code changes across 9 domains—SAST, dependencies, secrets, CI/CD, containers, IaC, API/web, crypto, and threat modeling—using manual checklists and automated scanners to ensure safe deployment.
To run a security compliance check before merging, execute a pre-deploy review that applies a risk-rated checklist across 9 security domains and runs matching automated scanners to emit a ship, fixed, or no-ship gate decision.
Yes, automated vulnerability scanning for CI/CD and containers is supported as part of a 9-domain pre-deploy review, running matching open-source scanners for each domain alongside a manual checklist to gate deployments.
The best way to perform threat modeling and secrets scanning for infrastructure as code is using a comprehensive pre-deploy review methodology that applies risk-rated checklists and automated scanners across 9 distinct security domains.
Yes, this pre-deploy review supports SAST and dependency scanning for API and web applications, running automated open-source scanners and manual checklists across 9 domains including crypto and threat modeling to produce a deployment gate.
You need a risk-rated checklist and automated scanner for secure code deployment when you want to enforce a ship, fixed, or no-ship gate decision across 9 security domains before merging any code changes into production.
NickCrewIdentify and mitigate security vulnerabilities in CI/CD pipelines.
drt0927Automate release orchestration from PR merge to production verification.
offers-pngRun dependency, SAST, and HoundDog scans in parallel and report vulnerabilities.
Weihong-LiuAudit code for OWASP Top 10 vulnerabilities, hardcoded secrets, and unsafe patterns.
