Scan generated code for OWASP vulnerabilities and produce security reports.
npx skills add https://github.com/timequity/plugins --skill security-check
Please help me install this Agent Skill. Skill: security-check Source: https://github.com/timequity/plugins/tree/main/vibe-coder/skills/security-check Command: npx skills add https://github.com/timequity/plugins --skill security-check
Automatically enforce security checks on generated code to catch vulnerabilities before deployment.
Run the security scan across a project and review findings; auto-fix for common issues if possible.
High-intent search queries and answers about installing and using this skill.
OWASP security scanning analyzes code to detect vulnerabilities like SQL injection, hardcoded secrets, unsafe eval/exec, command injection, and insecure deserialization. This Skill applies automated checks across multiple languages, reporting issues with line numbers, severity levels, and fix suggestions to catch problems before deployment.
Yes. Security checks integrate into code-generation pipelines and CI/CD workflows to enforce automated validation rules and produce structured reports. Each file is scanned with line-specific issue objects that include category, severity, and remediation guidance.
Automated analysis detects SQL injection, hardcoded secrets, unsafe eval/exec, insecure deserialization, command injection, insecure HTTP, unvalidated input, and debugging exposure. The Skill reports each issue with severity classification and actionable fix recommendations.
Yes. Beyond detection and reporting, this Skill offers optional auto-fix capabilities for common security issues, allowing you to remediate vulnerabilities automatically where safe to do so.
Input validation within security checks sanitizes inputs and prevents unsafe patterns that could expose applications to injection attacks and other input-based vulnerabilities across your generated code.
Yes. Security checks include authentication and authorization validation to ensure proper auth mechanisms, CSRF protection, and permission enforcement are correctly implemented in your code.
dhar174Generate technology-agnostic prompts for scanning codebases to document code exemplars.
abzhawApply a 7-step incident lifecycle to remediate Julia's sentinel security findings.
VoDaiLoczAutomate linting and static analysis of code in CI pipelines.
Moisesjr20Detect OWASP Top 10 vulnerabilities in source code across languages.
