security-check

Name: security-check
Availability: InStock
Author: timequity

Scan generated code for OWASP vulnerabilities and produce security reports.

6|Updated Dec 7, 2025

Search Tags:#automation #security #vulnerability #owasp #code-analysis #scan

Ready to run

npx skills add https://github.com/timequity/plugins --skill security-check

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-check
Source: https://github.com/timequity/plugins/tree/main/vibe-coder/skills/security-check
Command: npx skills add https://github.com/timequity/plugins --skill security-check

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Automatically enforce security checks on generated code to catch vulnerabilities before deployment.

Core Features & Use Cases

Input Validation: Sanitize inputs and prevent unsafe patterns.
Authentication/ Authorization: Ensure proper auth, CSRF, and permissions.
Data Exposure & Headers: Prevent secrets leakage and enforce HTTPS/security headers.

Quick Start

Run the security scan across a project and review findings; auto-fix for common issues if possible.

Frequently Asked Questions about security-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan code for OWASP security vulnerabilities automatically?▼

OWASP security scanning analyzes code to detect vulnerabilities like SQL injection, hardcoded secrets, unsafe eval/exec, command injection, and insecure deserialization. This Skill applies automated checks across multiple languages, reporting issues with line numbers, severity levels, and fix suggestions to catch problems before deployment.

Can I use security checks in my CI/CD pipeline?▼

Yes. Security checks integrate into code-generation pipelines and CI/CD workflows to enforce automated validation rules and produce structured reports. Each file is scanned with line-specific issue objects that include category, severity, and remediation guidance.

What security issues does automated code analysis detect?▼

Automated analysis detects SQL injection, hardcoded secrets, unsafe eval/exec, insecure deserialization, command injection, insecure HTTP, unvalidated input, and debugging exposure. The Skill reports each issue with severity classification and actionable fix recommendations.

Does this tool support auto-fixing security vulnerabilities?▼

Yes. Beyond detection and reporting, this Skill offers optional auto-fix capabilities for common security issues, allowing you to remediate vulnerabilities automatically where safe to do so.

How does input validation work in security scanning?▼

Input validation within security checks sanitizes inputs and prevents unsafe patterns that could expose applications to injection attacks and other input-based vulnerabilities across your generated code.

Can I verify authentication and authorization in generated code?▼

Yes. Security checks include authentication and authorization validation to ensure proper auth mechanisms, CSRF protection, and permission enforcement are correctly implemented in your code.