Run Bandit, pip-audit, and detect-secrets scans for vulnerabilities and credential leaks.
npx skills add https://github.com/gmanch94/agora --skill security-audit-gmanch94
Please help me install this Agent Skill. Skill: security-audit Source: https://github.com/gmanch94/agora/tree/main/.claude/skills/security-audit Command: npx skills add https://github.com/gmanch94/agora --skill security-audit-gmanch94
This Skill prevents security regressions by running a broad, milestone-ready audit that detects hardcoded secrets, dependency vulnerabilities, and risky code patterns before changes reach real ILL/tenant infrastructure.
payload and outbox payload content that could end up in audit logs or database rows.Example: After modifying ReShare or NCIP client credential handling, run this audit before merging to ensure no secrets were introduced in saga/outbox data and no vulnerable transitive dependencies were added.
Run the bundled scanner from the repo root using the project venv so it executes Bandit, pip-audit, and detect-secrets consistently against your current codebase.
High-intent search queries and answers about installing and using this skill.
Detect secrets and vulnerabilities by running a comprehensive security audit using Bandit, pip-audit, and detect-secrets. This scans your Python code and locked dependencies to flag high or critical severity risks and credential leaks before changes reach production.
Detect-secrets scans saga-event payload and outbox payload content to identify agora-specific credential exposure paths. It evaluates these surfaces to ensure newly introduced secret patterns do not end up persisting in database rows or audit logs.
Run the bundled scanner from your repository root using the project virtual environment. This executes Bandit and pip-audit consistently against your current codebase to evaluate security-sensitive code and locked dependency CVEs.
Run a dependency audit and secrets detection during milestone readiness, after modifying auth or credentials modules, before real tenant exposure, and periodically every 10 pull requests to prevent security regressions.
Yes, pip-audit scans your locked dependencies to find transitive dependency CVEs. It evaluates the results alongside code and secrets scans to ensure no vulnerable packages were added before merging.
Yes, the security audit executes Bandit to find risky security-sensitive Python code patterns alongside pip-audit for dependency CVEs and detect-secrets for hardcoded credentials, providing multi-surface scanning.
EngineerWithAIManage Python dependencies and virtual environments with the uv package manager.
endorlabsDisplay and filter Endor Labs security findings by severity, reachability, and category.
jamesaphoenixAdd a domain event type to the transactional outbox system across contracts, models, schemas, workflows, and persistence.
kalshamsiGenerate a multi-stage GitHub Actions security pipeline with SAST, SCA, secrets, and container scanning.