security-audit

Detect security vulnerabilities and exposed secrets in software projects.

Updated Feb 25, 2026

Search Tags:#code review #security #vulnerability #audit #secrets #dependency scanning

Ready to run

npx skills add https://github.com/ACubero/IA_AGENT_esqueleto_proyectos_python_antigravity --skill security-audit-acubero

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/ACubero/IA_AGENT_esqueleto_proyectos_python_antigravity/tree/main/.agent/skills/security_audit
Command: npx skills add https://github.com/ACubero/IA_AGENT_esqueleto_proyectos_python_antigravity --skill security-audit-acubero

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires safety, pip-audit, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill proactively identifies and mitigates security risks within your project, protecting against exposed secrets, dependency vulnerabilities, and insecure coding practices.

Core Features & Use Cases

Secret Detection: Scans code for hardcoded credentials, API keys, and other sensitive information.
Dependency Auditing: Checks installed packages for known security vulnerabilities.
Insecure Pattern Identification: Flags common coding anti-patterns that pose security risks.
Use Case: Before deploying your application, run this skill to ensure no sensitive API keys are accidentally committed to your repository and that all your dependencies are free from critical CVEs.

Quick Start

Run a comprehensive security audit on the current project.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan my code for hardcoded secrets and exposed API keys?▼

Scanning code for hardcoded secrets and exposed API keys requires an automated detection tool that pattern-matches sensitive information. This process identifies committed credentials to mitigate security risks and ensure compliance before deployment.

What is dependency scanning and how does it find known vulnerabilities?▼

Dependency scanning is the process of checking installed packages against databases of known security vulnerabilities. It identifies outdated or compromised libraries, ensuring your project's dependencies are free from critical CVEs before deployment.

How do I audit Python dependencies for security vulnerabilities using pip-audit?▼

Auditing Python dependencies for security vulnerabilities using pip-audit involves running command-line tools to analyze installed packages. This identifies known CVEs in your environment, ensuring dependencies comply with security best practices before deployment.

Can I detect insecure coding patterns and anti-patterns before deployment?▼

Yes, detecting insecure coding patterns and anti-patterns before deployment is possible using automated security audits. These tools flag common coding risks to mitigate vulnerabilities early, ensuring your application follows security best practices.

Do I need Python tools like safety to check installed packages for CVEs?▼

Yes, using Python tools like safety is necessary to check installed packages for CVEs. These dependencies automate the detection of security vulnerabilities in your project, ensuring your environment is secure and compliant before deployment.