security

Automate secret detection, dependency audits, and secure configuration validation.

Updated Feb 8, 2026

Search Tags:#security #owasp #secure coding #secrets management #dependency audit #vulnerability scanning

Ready to run

npx skills add https://github.com/AdigunQ/ralph-smart --skill security-adigunq

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security
Source: https://github.com/AdigunQ/ralph-smart/tree/main/knowledges/bootstrap_skills/security
Command: npx skills add https://github.com/AdigunQ/ralph-smart --skill security-adigunq

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill enforces robust security practices across your project, preventing common vulnerabilities and ensuring sensitive data is protected.

Core Features & Use Cases

Proactive Vulnerability Detection: Integrates pre-commit hooks and GitHub Actions for continuous security scanning.
Secrets Management: Enforces strict rules against committing secrets and validates environment variable usage.
Dependency Auditing: Checks for known vulnerabilities in project dependencies.
Input Validation & Authentication Best Practices: Provides guidelines and examples for secure coding patterns.
Use Case: Before merging any code, this Skill automatically scans for hardcoded secrets, audits npm dependencies for high-severity vulnerabilities, and validates that environment variables are not exposing sensitive information to the client.

Quick Start

Ensure your project adheres to the security best practices outlined in this skill.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate vulnerability scanning and prevent secrets in commits using GitHub Actions?▼

Automate vulnerability scanning and secrets management by integrating pre-commit hooks and GitHub Actions workflows. These tools continuously scan for hardcoded secrets, audit dependencies for high-severity vulnerabilities, and validate environment variable configuration before code merges.

What is the best way to enforce secure coding patterns for SQL injection and XSS prevention?▼

Enforce secure coding patterns for SQL injection and XSS prevention by following provided coding guidelines and input validation examples. These rules mitigate common risks by validating environment variables and ensuring proper input handling across your software development project.

Does this secure coding skill work with npm dependency audits for high-severity vulnerabilities?▼

Yes, this secure coding skill works with npm dependency audits by automatically checking project dependencies for known high-severity vulnerabilities. It validates that your environment variables are secure and ensures sensitive information is not exposed to the client.

Can I use pre-commit hooks to validate environment variables and detect hardcoded secrets locally?▼

Yes, you can use pre-commit hooks to validate environment variables and detect hardcoded secrets locally. The skill enforces strict rules against committing secrets and provides continuous security scanning to protect sensitive data before pushing code.

What are the limitations of automated dependency auditing for path traversal and XSS risks?▼

Automated dependency auditing detects known vulnerabilities in project packages but does not automatically fix code-level path traversal or XSS risks. Developers must manually apply the provided secure coding guidelines and input validation examples to mitigate these specific application vulnerabilities.