Automate security auditing of codebases and dependencies for vulnerabilities.
npx skills add https://github.com/stratus/my-claude --skill security-audit-stratus
Please help me install this Agent Skill. Skill: security-audit Source: https://github.com/stratus/my-claude/tree/main/skills/security-audit Command: npx skills add https://github.com/stratus/my-claude --skill security-audit-stratus
This skill helps development teams quickly identify security vulnerabilities in code and dependencies before they reach production, reducing the risk of breaches and compliance issues.
Run a security audit across your project path to generate a structured report and remediation recommendations.
High-intent search queries and answers about installing and using this skill.
You automate security auditing by running standard tools like npm audit, pip-audit, govulncheck, and cargo audit across your codebase to uncover vulnerabilities and misconfigurations. The process generates structured findings and remediation recommendations during PR reviews or deployment preparation.
Yes, secret detection scans code repositories for hardcoded keys and credentials. This automated check identifies sensitive data exposed in source files, reducing the risk of breaches before changes reach production environments.
Dependency vulnerability checks validate dependencies across npm, Python, Go, and other ecosystems using standard tools. The auditing process integrates npm audit, pip-audit, govulncheck, and cargo audit to identify vulnerable packages.
Integrating vulnerability scanning into PR reviews works by running automated tooling alongside the code-reviewer agent. This complements manual reviews by presenting structured security findings and actionable remediation steps directly during the review process.
Security audits for deployment preparation involve scanning your project path to identify vulnerabilities and misconfigurations. The audit generates a structured report with actionable findings and remediation recommendations to resolve issues before deployment.
softsparkDetect known CVEs in project dependencies using native package manager audit tools.
Blake-JohnIdentify security vulnerabilities and generate structured audit reports with severity ratings.
AAbdulghanyAutomate pull request reviews with role-based gating and human sign-off.
kinnerkarmanishDetect vulnerabilities and misconfigurations across codebases using static analysis, dependency checks, and secret detection.
