skills.rest
ShunsukeHayashi
ShunsukeHayashiCOMMUNITY
Explore all skills by this author →
Website𝕏@The_AGI_WAYGitHub

Security Audit and Vulnerability Scanning

Scan Rust projects for dependency CVEs, unsafe code, and leaked secrets.

Updated Aug 23, 2026
Search Tags:#code quality#dependency management#compliance#security audit#CVE#secret detection#vulnerability scanning
One-click install
npx skills add https://github.com/ShunsukeHayashi/miyabi-mcp-bundle --skill security-audit-and-vulnerability-scanning
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Security Audit and Vulnerability Scanning
Source: https://github.com/ShunsukeHayashi/miyabi-mcp-bundle/tree/main/claude-plugins/miyabi-full/skills/security-audit
Command: npx skills add https://github.com/ShunsukeHayashi/miyabi-mcp-bundle --skill security-audit-and-vulnerability-scanning

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires cargo-audit, cargo-deny, cargo-geiger, gitleaks, cargo-supply-chain, and includes scripts (resource) components.

What problem does it solve?

This Skill automates comprehensive security audits and vulnerability scanning, identifying weaknesses in dependencies, unsafe code, and leaked secrets. It helps maintain a secure codebase and prevents critical vulnerabilities from reaching production.

Core Features & Use Cases

  • Dependency Vulnerability Scanning: Integrates cargo-audit and cargo-deny to check for known CVEs and enforce security policies.
  • Unsafe Code Detection: Uses cargo-geiger to identify and quantify unsafe code blocks, aiding in risk assessment.
  • Secret Management: Employs gitleaks to detect accidentally committed secrets (API keys, tokens) in your repository history.
  • Use Case: Before a major production deployment, activate this Skill to perform a full security audit. It will scan your dependencies for CVEs, check for policy violations, detect unsafe Rust code, and ensure no sensitive secrets have been committed, providing a comprehensive security report.

Quick Start

Run a full security audit on the current project, including dependency checks and secret detection.

Frequently Asked Questions about Security Audit and Vulnerability Scanning

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my Rust project for dependency vulnerabilities before deployment?▼

Dependency vulnerability scanning detects known CVEs in your project's dependencies using cargo-audit and cargo-deny. Run a full audit to identify risky packages and enforce security policies before pushing code to production, ensuring vulnerabilities are caught early.

Can I detect unsafe code in my Rust codebase automatically?▼

Yes, unsafe code detection uses cargo-geiger to identify and quantify unsafe blocks in your code. This helps assess risk exposure and guide refactoring decisions to minimize unsafe code before production deployment.

What's the best way to prevent accidentally committing secrets to my repository?▼

Secret management scans your Git history using gitleaks to detect accidentally committed secrets like API keys and tokens. Running this check catches leaks before they reach production and protects sensitive credentials from exposure.

Does this security audit work with CI/CD pipelines?▼

Yes, this Skill is specifically designed for CI/CD integration, enabling automated security audits during build workflows. It performs dependency scanning, policy enforcement, unsafe code detection, and secret detection with standardized output reporting for pipeline automation.

How do I perform a comprehensive security audit covering all vulnerability types?▼

A comprehensive audit combines dependency CVE scanning, policy enforcement, unsafe code detection, and secret exposure checks into one workflow. Run the full audit to generate a complete security report addressing dependencies, unsafe code, and leaked secrets in a single pass.

Related Skills

Explore More Software Engineering Skills→
anssipanssip
26

passlane-release

Automates project releases by updating changelog, tagging git commits for CI.

Community
Advanced
JaviMontanoJaviMontano

apex-secrets-sanitization

Detect and mask exposed credentials across code, configs, docs, and pipelines.

Community
Advanced
hiromimahiromima

Security Audit and Vulnerability Scanning

Identifies and fixes security vulnerabilities in Rust/CI workflows using cargo audit, cargo deny, cargo geiger, gitleaks, and cargo, supply-chain.

Community
Advanced
IndustrialIndustrial

code-reviewer

Analyze code for security vulnerabilities and performance issues.

Community
Advanced