security-analysis

Identify security threats and privacy risks in codebases with evidence paths.

12|1|Updated Jun 4, 2013

Search Tags:#security #vulnerability #analysis #risk-assessment #privacy #code-review #threat-detection

Ready to run

npx skills add https://github.com/bostonaholic/dotfiles --skill security-analysis-bostonaholic

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-analysis
Source: https://github.com/bostonaholic/dotfiles/tree/main/claude/skills/security-analysis
Command: npx skills add https://github.com/bostonaholic/dotfiles --skill security-analysis-bostonaholic

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill helps security teams detect threats, privacy violations, and risk indicators in codebases.

Core Features & Use Cases

Identify network exfiltration patterns, file system access risks, and code execution risks.
Generate actionable security reports with evidence paths and line numbers.
Useful for pre-merge audits, repository reviews, and dependency risk assessments.

Quick Start

Run a security audit across the codebase and generate a comprehensive findings report.

Frequently Asked Questions about security-analysis

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan a codebase for security vulnerabilities and credential leakage?▼

To scan a codebase for security vulnerabilities and credential leakage, run a security audit to identify threats across network, file access, and execution categories with evidence paths and line numbers.

What is the best way to detect data exfiltration patterns in cloned repositories?▼

Detecting data exfiltration patterns in cloned repositories involves auditing the code for network risks and privacy violations, providing structured findings with remediation guidance to secure the project.

Can I use this for pre-merge code reviews and dependency risk assessment?▼

Yes, you can use it for pre-merge code reviews and dependency risk assessment to evaluate code execution risks and generate actionable security reports with evidence paths.

How does threat detection work during a repository security audit?▼

Threat detection during a repository security audit works by analyzing code for network exfiltration, file system access, and execution risks, then categorizing findings with evidence paths and remediation steps.

Do I need additional dependencies to analyze code for privacy risks?▼

No additional dependencies are required to analyze code for privacy risks. The skill independently reviews dependencies and analyzes code for exfiltration patterns and credential leakage.