skills.rest
agentglass
agentglassOFFICIAL
Explore all skills by this author →
GitHub

security

Audit the claude-trace codebase for security vulnerabilities and coverage gaps.

1|Updated Mar 12, 2026
Search Tags:#code review#security#vulnerability#dependencies#audit#rust
One-click install
npx skills add https://github.com/agentglass/claude-trace --skill security-agentglass
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security
Source: https://github.com/agentglass/claude-trace/tree/main/.claude-plugin/skills/security
Command: npx skills add https://github.com/agentglass/claude-trace --skill security-agentglass

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires cargo-audit, pip-audit, npm, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates comprehensive security checks for the claude-trace codebase, identifying potential vulnerabilities and ensuring adherence to security best practices.

Core Features & Use Cases

  • Vulnerability Scanning: Detects issues like span content leakage, API key exposure, unsafe code, dependency vulnerabilities, and hardcoded secrets.
  • Coverage Analysis: Verifies test coverage and ensures critical configurations are secure by default.
  • Use Case: Before releasing a new version, run this Skill to perform a full security review, ensuring no critical vulnerabilities have been introduced.

Quick Start

Run a full security audit of the claude-trace codebase.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate a security audit for a Rust codebase before release?▼

Automating a security audit scans for unsafe Rust code, dependency vulnerabilities, and hardcoded secrets with deterministic file:line locations. This non-interactive process identifies span content leakage and API key capture to ensure safe releases.

What does a comprehensive dependency vulnerability check include?▼

A comprehensive dependency vulnerability check identifies known CVEs in project dependencies, verifies test coverage gates, and detects hardcoded API keys. It ensures repeatable and deterministic findings with specific file:line locations for targeted remediation.

Can I use cargo-audit and npm together for full stack vulnerability scanning?▼

Yes, cargo-audit, pip-audit, and npm work together for full stack vulnerability scanning. This combination detects dependency vulnerabilities, unsafe Rust code, and hardcoded secrets across mixed technology stacks with deterministic findings.

What is the best way to detect hardcoded secrets and API key exposure in code?▼

The best way to detect hardcoded secrets and API key exposure is running a non-interactive security audit that identifies span content leakage and API key capture. It provides deterministic findings with specific file:line locations for immediate remediation.

Does automated security auditing work for checking test coverage and truncation?▼

Automated security auditing works for checking test coverage and truncation coverage. It verifies test coverage gates and ensures critical configurations are secure by default while outputting repeatable file:line locations.

Related Skills

Explore More Software Engineering Skills→
softsparksoftspark
161

cve-scan

Detect known CVEs in project dependencies using native package manager audit tools.

Community
Intermediate
maruakshaymaruakshay
4

litellm-proxy-security

Audits LiteLLM proxy deployments for API key leakage and implements hardening steps.

Community
Advanced
bobmatnycbobmatnyc
146

Requesting Code Review

Dispatch a code-reviewer subagent to review changes against plans and requirements.

Community
Basic
jorgealvesjorgealves
2

python-security-scanner

Detect SQL injections, unsafe deserialization, and hardcoded secrets in Python codebases.

Community
Intermediate