security

Name: security
Availability: InStock
Author: agentglass

Audit the claude-trace codebase for security vulnerabilities and coverage gaps.

1|Updated Mar 12, 2026

Search Tags:#code review #security #vulnerability #dependencies #audit #rust

Ready to run

npx skills add https://github.com/agentglass/claude-trace --skill security-agentglass

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security
Source: https://github.com/agentglass/claude-trace/tree/main/.claude-plugin/skills/security
Command: npx skills add https://github.com/agentglass/claude-trace --skill security-agentglass

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires cargo-audit, pip-audit, npm, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates comprehensive security checks for the claude-trace codebase, identifying potential vulnerabilities and ensuring adherence to security best practices.

Core Features & Use Cases

Vulnerability Scanning: Detects issues like span content leakage, API key exposure, unsafe code, dependency vulnerabilities, and hardcoded secrets.
Coverage Analysis: Verifies test coverage and ensures critical configurations are secure by default.
Use Case: Before releasing a new version, run this Skill to perform a full security review, ensuring no critical vulnerabilities have been introduced.

Quick Start

Run a full security audit of the claude-trace codebase.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate a security audit for a Rust codebase before release?▼

Automating a security audit scans for unsafe Rust code, dependency vulnerabilities, and hardcoded secrets with deterministic file:line locations. This non-interactive process identifies span content leakage and API key capture to ensure safe releases.

What does a comprehensive dependency vulnerability check include?▼

A comprehensive dependency vulnerability check identifies known CVEs in project dependencies, verifies test coverage gates, and detects hardcoded API keys. It ensures repeatable and deterministic findings with specific file:line locations for targeted remediation.

Can I use cargo-audit and npm together for full stack vulnerability scanning?▼

Yes, cargo-audit, pip-audit, and npm work together for full stack vulnerability scanning. This combination detects dependency vulnerabilities, unsafe Rust code, and hardcoded secrets across mixed technology stacks with deterministic findings.

What is the best way to detect hardcoded secrets and API key exposure in code?▼

The best way to detect hardcoded secrets and API key exposure is running a non-interactive security audit that identifies span content leakage and API key capture. It provides deterministic findings with specific file:line locations for immediate remediation.

Does automated security auditing work for checking test coverage and truncation?▼

Automated security auditing works for checking test coverage and truncation coverage. It verifies test coverage gates and ensures critical configurations are secure by default while outputting repeatable file:line locations.