Audits code and infrastructure for security and compliance risks.
npx skills add https://github.com/lgbarn/shipyard --skill security-audit-lgbarn
Please help me install this Agent Skill. Skill: security-audit Source: https://github.com/lgbarn/shipyard/tree/main/skills/security-audit Command: npx skills add https://github.com/lgbarn/shipyard --skill security-audit-lgbarn
This Skill helps teams identify and remediate security gaps across code, infrastructure-as-code, configurations, and dependencies before release, reducing risk and audit time.
Run the security-audit at the root of your repository to initiate the checks and generate a findings report.
High-intent search queries and answers about installing and using this skill.
To audit your codebase for OWASP Top 10 vulnerabilities and hard-coded secrets, run a security audit at your repository root to scan code, configurations, and IaC, generating a consolidated risk findings report for remediation.
Checking dependency vulnerabilities and license compliance across multiple repositories involves scanning software supply chains to surface vulnerable libraries and license risks, producing a consolidated report for remediation planning.
To harden infrastructure-as-code and Docker images before deployment, apply security audits to enforce secure configurations and deployment practices across IaC files and container configurations, reducing risk prior to release.
Yes, you can use a security audit to check CI/CD pipelines and software supply chains, extending coverage to dependencies, configuration files, and deployment practices to identify security gaps and compliance issues before release.
Yes, security-audit works with infrastructure-as-code files and Docker configurations, applying IaC hardening and container security guidance to enforce secure configurations across your infrastructure and deployment setup.
When scanning multi-repo projects for security posture, expect that the audit focuses on identifying and remediating security gaps across code, IaC, and dependencies to reduce audit time, but requires manual execution at the repository root.
andisabAutomate security scanning and policy validation for Infrastructure as Code resources.
OWASPIdentify security misconfigurations in Terraform, Kubernetes, CloudFormation, and Helm IaC files.
yocxy2Automate security audits and threat modeling for software repositories.
HouseGarofaloScan container images, dependencies, and IaC for security vulnerabilities.
