Scan codebases and infrastructure for security flaws and guide remediations.
npx skills add https://github.com/gabi-agent/openretro --skill security-audit-gabi-agent
Please help me install this Agent Skill. Skill: security-audit Source: https://github.com/gabi-agent/openretro/tree/main/skills/security-audit-toolkit Command: npx skills add https://github.com/gabi-agent/openretro --skill security-audit-gabi-agent
Scan, detect, and fix security issues in codebases and infrastructure to reduce risk and improve reliability.
Run a full security audit on the project using the recommended tooling to surface vulnerabilities and guide fixes.
High-intent search queries and answers about installing and using this skill.
To scan codebases for security vulnerabilities and hardcoded secrets, run an audit using standard tooling like npm audit, pip-audit, and trivy to locate dependency issues, API keys, and OWASP Top 10 weaknesses.
The best way to check for dependency vulnerabilities across multi-language projects is using ecosystem-specific scanners like npm audit, pip-audit, safety, and govulncheck to identify and guide remediations for vulnerable packages.
Yes, you can integrate security audits into CI pipelines to automatically surface vulnerabilities, detect hardcoded credentials, and verify SSL/TLS configurations during the build process to improve reliability.
Yes, this security audit covers OWASP Top 10 checks and enforces least-privilege file and directory permissions audits to locate common weaknesses and verify infrastructure hardening across your project.
To fix security flaws found during a dependency scan or code review, follow the actionable remediation guidance provided to update vulnerable packages, remove hardcoded secrets, and improve secure coding practices.
apacheScan project dependencies for known vulnerabilities and propose upgrades.
weirdgmeAutomate security integration across CI/CD pipelines with policy-as-code enforcement.
ntluong95Enforces security protocols including AES-256 encryption, TLS 1.3, Zero Trust, least privilege, SQLi/XSS prevention, dependency management, and secure authentication for building software.
skyasu2Automate pre-deployment security audits for Next.js/Supabase CI pipelines.
