skills.rest
hiromima
hiromimaCOMMUNITY
Explore all skills by this author →
GitHub

Security Audit and Vulnerability Scanning

Identifies and fixes security vulnerabilities in Rust/CI workflows using cargo audit, cargo deny, cargo geiger, gitleaks, and cargo, supply-chain.

Updated Jan 10, 2026
Search Tags:#security#vulnerability#audit#rust#secrets#scanning#dependency
One-click install
npx skills add https://github.com/hiromima/collaborative-canvas --skill security-audit-and-vulnerability-scanning-hiromima
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Security Audit and Vulnerability Scanning
Source: https://github.com/hiromima/collaborative-canvas/tree/main/.claude/skills/security-audit
Command: npx skills add https://github.com/hiromima/collaborative-canvas --skill security-audit-and-vulnerability-scanning-hiromima

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Comprehensive security auditing across dependencies, code, and secrets to prevent vulnerabilities in production.

Core Features & Use Cases

  • Dependency vulnerability scanning with cargo-audit and policy checks.
  • Unsafe code detection, secret management, and threat remediation guidance.
  • Use case: Run this workflow before production deployment to ensure a secure, compliant codebase.

Quick Start

Run a full security audit covering dependencies, code safety, and secret management before deploying to production.

Frequently Asked Questions about Security Audit and Vulnerability Scanning

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security audit on Rust dependencies before production deployment?▼

Perform a comprehensive security audit using cargo-audit and cargo-deny to scan Rust dependencies, detect vulnerabilities, and apply policy checks before deploying to production.

What is the best way to detect unsafe code and leaked secrets in a Rust project?▼

Detect unsafe code and leaked secrets by running cargo-geiger for unsafe code identification and gitleaks for secret scanning to remediate potential security threats across your Rust project.

Can I use cargo deny and cargo supply-chain for periodic vulnerability scanning in CI workflows?▼

Yes, you can integrate cargo-deny and cargo-supply-chain into CI workflows to enforce policy checks, verify dependency provenance, and perform periodic vulnerability scanning across your Rust project.

Does Rust dependency scanning work with pre-production deployments and periodic security audits?▼

Rust dependency scanning applies directly to pre-production deployments and periodic security audits, providing threat remediation guidance and verifying code safety before releasing to production.

How do I fix security vulnerabilities found by cargo audit in my Rust dependencies?▼

Fix security vulnerabilities found by cargo-audit by updating compromised crates, applying threat remediation guidance, and re-running the full security audit workflow until the codebase is clear.

Related Skills

Explore More Software Engineering Skills→
leogallegoleogallego
27

ansible-scaffold-ee

Scaffold Ansible execution environment projects with dependency files and CI/CD pipelines.

Community
Advanced
haJ1thaJ1t

purple-team-analyzer

Simulate attack paths and validate defense controls in a codebase.

Community
Advanced
georgekhananaevgeorgekhananaev
27

code-quality

Enforce cross-language code quality standards across TypeScript, Python, Go, and Rust.

Community
Advanced
AgentSecOpsAgentSecOps
183

sast-horusec

Run Horusec SAST scans to detect vulnerabilities and secrets in git history.

Official
Advanced