What problem does it solve?
Manually identifying security vulnerabilities, analyzing third-party dependencies for known issues, and detecting insecure code patterns is a complex and critical task. This skill automates comprehensive security analysis, helping developers and architects proactively secure their codebase.
Core Features & Use Cases
- Vulnerability Scanning: Scans for common vulnerabilities like SQL injection, hardcoded secrets, unsafe deserialization, weak cryptography, and missing input validation.
- Dependency Analysis: Analyzes third-party packages for known CVEs and provides security notes.
- Security Pattern Detection: Identifies suspicious code patterns such as custom cryptographic implementations, bare
except clauses, debug mode in production, and unprotected API routes.
- Comprehensive Reporting: Generates a detailed security report with severity levels (critical, high, medium, low) and actionable recommendations.
- Use Case: Before deploying a new feature to production, a
code_developer runs this skill to perform a security audit. It identifies a hardcoded API key (critical vulnerability) and a bare except clause (low severity), allowing them to fix these issues before they become a problem.
Quick Start
# Scan the codebase for common security vulnerabilities
python scripts/security_audit.py check_vulnerabilities
# Analyze third-party dependencies for known security issues
python scripts/security_audit.py analyze_dependencies
# Generate a comprehensive security report
python scripts/security_audit.py generate_report
