skills.rest
cdrguru
cdrguruCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-audit

Automates a three-phase security and configuration audit to detect secret leaks and deployment gaps.

1|Updated Dec 21, 2025
Search Tags:#infrastructure#ci-cd#env-vars#security-audit#secret-detection#deployment-readiness
One-click install
npx skills add https://github.com/cdrguru/portable-agent-kit --skill security-audit-cdrguru
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/cdrguru/portable-agent-kit/tree/main/.agent/skills/security-audit
Command: npx skills add https://github.com/cdrguru/portable-agent-kit --skill security-audit-cdrguru

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Automates a three-part security and configuration audit across any repository to detect secret leaks, environment variable gaps, and deployment-readiness risks.

Core Features & Use Cases

  • Secret leakage scan: Detects hardcoded credentials and sensitive patterns in code and config.
  • Env var completeness: Validates required environment variables against a discoverable template.
  • Deployment readiness: Assesses deployment-related configs and infra references to ensure readiness for new, isolated deployments.
  • Use Case: Before release, run the audit to surface leaks and config gaps across diverse stacks.

Quick Start

Run the security-audit workflow in your repository to start the three-phase scan and generate a findings report.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my repository for hardcoded secrets and deployment-readiness gaps?▼

To scan a repository for hardcoded secrets and deployment-readiness gaps, run an automated three-phase audit that discovers configurations, scans for credential leakage, and validates environment variable completeness.

Can I run a secret detection and environment variable check in my CI pipelines?▼

Yes, you can run this security audit in CI pipelines or local environments, allowing you to surface credential leaks and missing environment variables before release across diverse technology stacks.

Does this deployment readiness audit work with any programming language or framework?▼

This deployment readiness audit is universal and works with any language or framework, validating environment variable templates and infrastructure definitions to ensure isolated deployments are ready for release.

How do I validate missing environment variables against a template before deployment?▼

Validating missing environment variables requires checking your repository configuration against a discoverable template during the completeness phase of a security audit to identify deployment gaps.

What are the limitations of automated security audits for infrastructure configurations?▼

Automated security audits rely on configurable patterns and templates to detect leaks, meaning they require proper template setup to accurately validate environment variables and deployment readiness without missing custom configurations.

Related Skills

Explore More Software Engineering Skills→
somachaksomachak

auditing-secrets-and-config

Audit code, configuration, and CI/CD pipelines for exposed secrets.

Community
Intermediate
beekeeper-labbeekeeper-lab
1

Validate Config

Detect and remediate misconfigurations and secret exposures in software projects.

Community
Advanced
Obsidian-OwlObsidian-Owl
9

gate-security

Scan changed files for leaked secrets and injection patterns using SAST tools.

Official
Advanced
matteocervellimatteocervelli
25

security-scanner

Scan codebases for secrets, vulnerable dependencies, and insecure patterns.

Community
Advanced