Automates security validation, vulnerability scanning, and compliance checks for development environments.
npx skills add https://github.com/williaby/.claude --skill security
Please help me install this Agent Skill. Skill: security Source: https://github.com/williaby/.claude/tree/main/skills/security Command: npx skills add https://github.com/williaby/.claude --skill security
This Skill automates critical security checks for your development environment and codebase, proactively identifying vulnerabilities and misconfigurations. It saves you from manual security audits, reduces the risk of breaches, and ensures compliance with best practices, allowing you to build secure applications with confidence.
safety and bandit..env with GPG encryption./security/scan to automatically check your project's dependencies and code for vulnerabilities, receiving a prioritized report with remediation steps.Validate your development environment's security configuration, including GPG keys and Git signing.
/security/validate-env
High-intent search queries and answers about installing and using this skill.
Dependency scanning identifies known security issues in your project's libraries. Run `/security/scan` to automatically check dependencies and code with tools like `safety` and `bandit`, receiving a prioritized report with remediation steps for identified vulnerabilities.
Environment validation ensures your development setup has secure key management configured. Use `/security/validate-env` to automatically check GPG keys, SSH keys, and Git signing configuration, confirming your environment meets security best practices.
Git signing enforcement verifies commit authenticity and prevents unauthorized changes. This Skill validates and manages Git signing through GPG key integration, automating compliance checks to ensure all commits meet signing requirements in your workflow.
File encryption protects secrets from exposure in version control. This Skill secures sensitive files using GPG encryption, allowing you to safely store encrypted `.env` and credential files while maintaining automated access during CI/CD pipelines.
Static analysis detects code-level security issues without running the application. This Skill combines dependency scanning with `bandit` for Python static analysis, covering both supply-chain vulnerabilities and code vulnerabilities in a single automated workflow.
OWASP compliance validation ensures adherence to security standards. This Skill automates compliance workflows and vulnerability scanning aligned with OWASP best practices, supporting both local development setups and CI/CD pipeline integration for continuous compliance.
t0labConfigure SSH or GPG commit signing for Git repositories.
michaelalberReview .NET applications for OWASP Top 10 vulnerabilities and Telerik CVEs.
HomericIntelligenceScan code and dependencies for security vulnerabilities using Bandit, Safety, and Semgrep.
Prathmesh2000Automate CI/CD pipelines with linting, tests, security scans, and deployment gates.