skills.rest
Axel-DaMage
Axel-DaMageCOMMUNITY
Explore all skills by this author →
GitHub

security-auditor

Automate security audits on code repositories using trivy, semgrep, and gh CLI.

2|Updated Jun 29, 2026
Search Tags:#security#vulnerability#audit#pre-deployment#pr check
One-click install
npx skills add https://github.com/Axel-DaMage/opencode-config --skill security-auditor-axel-damage
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-auditor
Source: https://github.com/Axel-DaMage/opencode-config/tree/main/skills/security-auditor
Command: npx skills add https://github.com/Axel-DaMage/opencode-config --skill security-auditor-axel-damage

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires trivy, semgrep, gh, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the process of conducting pre-deployment security audits and PR checks, ensuring that critical vulnerabilities are identified and addressed before deployment.

Core Features & Use Cases

  • Pre-deployment Security Audit: Identifies critical vulnerabilities and blocks deployment if necessary.
  • PR Security Audit: Performs security checks on pull requests to catch vulnerabilities early.
  • Monorepo Support: Supports scoped audits within monorepos.
  • Integration with GitHub Security Features: Integrates with GitHub's Dependabot, code scanning, and secret scanning.

Quick Start

Run a full security audit using the security-auditor skill.

Frequently Asked Questions about security-auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate pre-deployment security audits for code repositories?▼

Pre-deployment security audits are automated by scanning code repositories with tools like trivy and semgrep to identify and address critical vulnerabilities before deployment to any environment.

Can I run security checks on pull requests to catch vulnerabilities early?▼

Yes, PR security checks scan pull requests to catch vulnerabilities early in the development cycle, integrating directly with GitHub Security features like Dependabot, code scanning, and secret scanning to identify issues before merge.

Do I need trivy and semgrep installed to run repository vulnerability scans?▼

Yes, you need trivy, semgrep, and the gh CLI installed as prerequisites. These dependencies handle the automated scanning and analysis required to identify critical vulnerabilities during the security audit process.

Does this security audit approach support scoped checks within monorepos?▼

Yes, monorepo support allows for scoped audits within monorepos. This targets specific parts of the repository during security checks, ensuring critical vulnerabilities are identified without scanning the entire codebase unnecessarily.

What is the best way to block deployment when critical vulnerabilities are found?▼

The best way to block deployment is by running a pre-deployment security audit that identifies critical vulnerabilities and automatically blocks the deployment process if those vulnerabilities are detected before release.

Related Skills

Explore More Software Engineering Skills→
fgarofalo56fgarofalo56
6

security-scanner

Scan container images, dependencies, and infrastructure configurations for security vulnerabilities.

Community
Advanced
LllooogggLlloooggg
26

fix-security

Fetch and remediate GitHub security alerts via the GitHub API and gh CLI.

Community
Intermediate
froggugugugufroggugugugu

security-scan

Execute SCA, SAST, DAST, and secret detection scans to report vulnerabilities.

Community
Advanced
nikhillinitnikhillinit

security-scanner

Detect security vulnerabilities, secrets, and misconfigurations in codebases.

Community
Advanced