skills.rest
alexanderjamesmcleod
alexanderjamesmcleodCOMMUNITY
Explore all skills by this author →
GitHub

security-check

Audit Node.js projects for vulnerabilities, secrets, and license compliance.

Updated Aug 23, 2026
Search Tags:#security-audit#secrets-detection#license-compliance#dependency-audit#http-headers#environment-security
One-click install
npx skills add https://github.com/alexanderjamesmcleod/makecents --skill security-check-alexanderjamesmcleod
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-check
Source: https://github.com/alexanderjamesmcleod/makecents/tree/main/src/skills/automation/security-check.skill
Command: npx skills add https://github.com/alexanderjamesmcleod/makecents --skill security-check-alexanderjamesmcleod

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Security teams and developers spend significant time auditing dependencies, detecting secrets in code, and verifying licenses. This skill automates these checks to reduce risk, save time, and improve compliance across Node.js projects and web applications.

Core Features & Use Cases

  • Dependency Audit: Runs npm/yarn/pnpm audit and reports issues with severities.
  • Secrets Detection: Scans for exposed credentials, API keys, and tokens in codebases.
  • License Compliance: Evaluates licenses of dependencies and flags potentially problematic licenses.
  • Environment & Headers Checks: Audits .env security and HTTP security headers, CORS configuration.
  • Comprehensive Reporting: Generates a full security report for stakeholders.

Quick Start

Run security-check audit in your project directory to perform a dependency audit, secrets scan, and generate a security report.

Frequently Asked Questions about security-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate dependency audits and secrets detection for a Node.js project?▼

Automate dependency audits and secrets detection by running a security check in your project directory to scan package.json files, identify exposed credentials, and generate a comprehensive security report.

Can I scan my codebase for exposed API keys and tokens automatically?▼

Yes, secrets detection automatically scans your codebase for exposed API keys, tokens, and credentials, flagging sensitive information to prevent security vulnerabilities before deployment.

What is the best way to check license compliance for npm dependencies?▼

Check license compliance by running an automated security audit that evaluates the licenses of your npm dependencies, flagging potentially problematic licenses in a comprehensive report for stakeholders.

Does this security audit work with yarn and pnpm ecosystems?▼

Yes, the security audit supports Node.js projects across npm, yarn, and pnpm ecosystems, running dependency audits and reporting vulnerabilities with severity levels for your specific package manager.

How do I validate environment security and HTTP headers for web apps?▼

Validate environment security and HTTP headers by running an audit that checks .env file security, verifies HTTP security headers, and audits CORS configuration to identify web application vulnerabilities.

What limitations should I expect when running automated security checks?▼

Automated security checks apply to Node.js projects with package.json files and web applications, focusing on dependency auditing, secrets scanning, environment validation, and header checks rather than runtime vulnerability monitoring.

Related Skills

Explore More Software Engineering Skills→
howellshowells
26

deps

Audit npm, yarn, and pnpm dependencies for security risks and outdated packages.

Community
Advanced
jaskaranhundaljaskaranhundal
3

devsecops-pipeline

Analyze CI/CD security findings and recommend gate actions and remediation steps.

Community
Advanced
marcoamumarcoamu
1

nodejs-security-audit

Audit Node.js HTTP servers for OWASP Top 10 vulnerabilities and apply fixes.

Community
Advanced
hoanghn61hoanghn61

source-code-scanning

Scan source code and dependencies for vulnerabilities, secrets, and malicious code.

Community
Advanced