security-check

Scans codebases for SQL injection, XSS, hardcoded secrets, and insecure serialization.

1|Updated Jan 19, 2026

Search Tags:#code security #vulnerability detection #security compliance #security auditing #secure coding practices

Ready to run

npx skills add https://github.com/diego-tobalina/vibe-coding --skill security-check-diego-tobalina

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-check
Source: https://github.com/diego-tobalina/vibe-coding/tree/main/.opencode/skills/security-check
Command: npx skills add https://github.com/diego-tobalina/vibe-coding --skill security-check-diego-tobalina

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires git-secrets, detect-secrets, grep, bash, pip, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill provides a comprehensive security audit of your codebase, detecting and preventing potential vulnerabilities like SQL injection, XSS, hardcoded secrets, and more.

Core Features & Use Cases

Security Auditing: Performs in-depth security analysis for common vulnerabilities.
Critical Vulnerability Detection: Identifies severe threats such as SQL injection, XSS, and hardcoded secrets.
Remediation Guidance: Offers remediation strategies and examples to mitigate vulnerabilities.

Quick Start

Run the security-check skill to audit your codebase for common security issues.

Frequently Asked Questions about security-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan my codebase for SQL injection and XSS vulnerabilities?▼

To scan your codebase for SQL injection and XSS vulnerabilities, run an automated security audit to identify potential risks in application code and ensure security compliance. This process detects severe threats and provides remediation guidance to mitigate them.

What is the best way to detect hardcoded secrets in my application code?▼

Detecting hardcoded secrets in application code is best handled by an automated security audit that scans your codebase for potential risks. This approach identifies exposed secrets and offers remediation strategies to ensure security compliance.

Can I use bash and grep to automate security auditing for insecure serialization?▼

You can automate security auditing for insecure serialization using bash and grep scripts to scan your codebase. This setup identifies potential risks in application code and provides remediation guidance to ensure security compliance.

Does this automated security audit provide remediation guidance for detected vulnerabilities?▼

Yes, the automated security audit provides remediation guidance for detected vulnerabilities. After identifying severe threats like SQL injection, XSS, and hardcoded secrets, it offers strategies and examples to mitigate them and ensure compliance.

Do I need pip and git-secrets installed to run a vulnerability detection scan?▼

You need pip, git-secrets, and detect-secrets installed to run a vulnerability detection scan. These dependencies enable the bash and grep scripts to identify hardcoded secrets and other risks in your application code.

When should I perform a security compliance audit on my codebase?▼

You should perform a security compliance audit on your codebase to identify potential risks like SQL injection, XSS, and insecure serialization before deployment. This ensures application code security and provides remediation strategies to mitigate vulnerabilities.