skills.rest
stark-ai-de
stark-ai-deOFFICIAL
Explore all skills by this author →
WebsiteGitHub

security-baseline-review

Review public repositories for security hygiene using git and the GitHub API.

4|1|Updated May 19, 2026
Search Tags:#security best practices#repository security#GitHub security#baseline review#public repository
One-click install
npx skills add https://github.com/stark-ai-de/agent-skills --skill security-baseline-review
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-baseline-review
Source: https://github.com/stark-ai-de/agent-skills/tree/main/incubator/skills/repo-maintenance/security-baseline-review
Command: npx skills add https://github.com/stark-ai-de/agent-skills --skill security-baseline-review

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill identifies common security issues in public repositories, ensuring hygiene at a maintainer level before release.

Core Features & Use Cases

  • Security Check: Identifies sensitive patterns, CI permissions, and dependency policy.
  • Review: Inspects config samples, READMEs, contribution docs, and dependency manifests.
  • Recommendations: Recommends safer defaults, rotation, and next actions for known issues.
  • Use Case: When preparing a public repository for release, run this Skill to catch potential security issues before they become a concern.

Quick Start

Run the security-baseline-review skill on a public repository to automatically check for security baseline issues.

Frequently Asked Questions about security-baseline-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I conduct a baseline security review for a public GitHub repository?▼

A baseline security review for a public GitHub repository checks secret patterns, CI permissions, dependency hygiene, and GitHub settings to ensure release readiness. This Skill automates these maintainer-level checks using standard tools like git and the GitHub API.

What does a public repository security hygiene check include?▼

A public repository security hygiene check includes identifying sensitive patterns, reviewing CI safety, inspecting dependency manifests, and checking config samples. It recommends safer defaults and next actions for known issues before release.

How do I check my GitHub CI permissions and dependency policy before release?▼

To check your GitHub CI permissions and dependency policy before release, run a baseline security review. This process inspects CI safety, dependency manifests, and repository settings, recommending safer defaults and necessary rotations.

Can I detect sensitive patterns in my repository using standard maintainer tools?▼

Yes, you can detect sensitive patterns in your repository using standard maintainer tools like git and the GitHub API. This Skill performs a baseline review to identify these patterns and improve overall security hygiene.

When do I need to run a public repository security baseline check?▼

You need to run a public repository security baseline check when preparing for a public release. It catches potential security issues like exposed secrets and unsafe CI configurations before they become a concern.

Related Skills

john-data-chenjohn-data-chen
2

github-code-review

Extract GitHub PR diffs and post inline comments via gh CLI or REST.

Community
Intermediate
rajitsaharajitsaha
10

security

Detect security vulnerabilities and leaked secrets in software projects.

Community
Intermediate
nsalvacaonsalvacao

Tech Stack Detection

Identify repository tech stacks and generate structured JSON reports.

Community
Advanced
matteocervellimatteocervelli
25

security-scanner

Scan codebases for secrets, vulnerable dependencies, and insecure patterns.

Community
Advanced