Scan codebases for secrets, OWASP risks, and vulnerable dependencies.
npx skills add https://github.com/DonTizi/CodeGeass --skill security-audit-dontizi
Please help me install this Agent Skill. Skill: security-audit Source: https://github.com/DonTizi/CodeGeass/tree/main/.claude/skills/security-audit Command: npx skills add https://github.com/DonTizi/CodeGeass --skill security-audit-dontizi
This Skill helps teams identify security weaknesses in codebases by performing a structured security audit that targets secrets, OWASP vulnerabilities, and dependency risks.
Run the security-audit skill against your project directory with the command: security-audit <path-to-project>
High-intent search queries and answers about installing and using this skill.
To automate a security audit for a codebase, run the security-audit skill against your project directory. It performs static analysis and pattern matching to identify secrets, OWASP risks, and vulnerable dependencies, generating a quick remediation list before release.
Static analysis for secrets detection and OWASP vulnerability classification is a code review mechanism that scans source files and configurations. It identifies exposed credentials and categorizes risks across the top ten OWASP vulnerability categories using pattern matching.
Yes, you can use this security audit skill in CI pipelines and manual code reviews. It is explicitly designed to support both automated continuous integration workflows and manual reviews to preempt security issues before deployment.
To scan source files and configs for exposed credentials and tokens, execute the security-audit command targeting your project path. The skill performs comprehensive secrets detection across the repository to find leaked keys, tokens, and credentials.
The best way to flag vulnerable dependencies and misconfigurations in a project is using a dependency risk analysis skill. It identifies outdated or vulnerable dependencies and misconfigurations by performing static analysis on the codebase.
Dependency risk analysis works without external components or dependencies. The skill operates independently using static analysis and pattern matching to evaluate dependency risks and flag misconfigurations within the codebase.
hatch3rFind files and directories by pattern with gitignore-aware fd CLI matching.
wilstoAudit code for OWASP Top 10 vulnerabilities and generate severity-ranked remediation reports.
dreamingechoesAutomate CI/CD pipelines with lint, typecheck, test, build, and security scan stages.
lpjhelderAudit codebases for vulnerabilities, misconfigurations, and secrets.
