Audit code and dependencies for security vulnerabilities with remediation guidance.
npx skills add https://github.com/cpa03/blueprintify --skill security-audit-cpa03
Please help me install this Agent Skill. Skill: security-audit Source: https://github.com/cpa03/blueprintify/tree/main/.opencode/skill/security-audit Command: npx skills add https://github.com/cpa03/blueprintify --skill security-audit-cpa03
Audits code and dependencies to identify and remediate security vulnerabilities, reducing risk from insecure libraries and unsafe code paths.
Run the security-audit workflow on your repository to produce a findings report and remediation steps.
High-intent search queries and answers about installing and using this skill.
To perform a security audit, execute the workflow on your repository to analyze code and dependencies. It enforces npm audit, secret scanning, and auth logic review on changed files, generating a findings report with remediation guidance.
Secret scanning checks for credential leakage and exposed secrets in changed files. During a dependency audit, it also reviews authentication and authorization logic to identify insecure code paths and reduce risk from leaked credentials.
Yes, you can use this security audit for multi-language projects. It is applicable during code reviews, dependency updates, and release cycles, analyzing changed files across various languages to identify vulnerabilities and insecure libraries.
To fix vulnerabilities found in npm audit results, follow the generated findings report. It provides remediation guidance for developers, detailing steps to update insecure libraries and resolve unsafe code paths or transitive dependencies.
You should run a security audit during code reviews, dependency updates, and release cycles. Integrating it into CI ensures continuous scanning of changed files for known vulnerabilities, secret leakage, and insecure authentication logic before deployment.
ClearMeasureLabsScan package.json files and run npm audit for dependency vulnerabilities.
mvillmowDetect security vulnerabilities in code and dependencies with static analysis.
philo-grovesConstruct static analysis graphs for reachability, guard dominance, and path feasibility.
freire19Audit codebases for vulnerabilities, insecure configurations, and dependency CVEs.
