security-check

Scans codebases for SQL injection, XSS, hardcoded secrets, and insecure serialization.

1|Updated Jan 19, 2026
One-click install
npx skills add https://github.com/diego-tobalina/vibe-coding --skill security-check-diego-tobalina
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-check
Source: https://github.com/diego-tobalina/vibe-coding/tree/main/.opencode/skills/security-check
Command: npx skills add https://github.com/diego-tobalina/vibe-coding --skill security-check-diego-tobalina

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires git-secrets, detect-secrets, grep, bash, pip, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill provides a comprehensive security audit of your codebase, detecting and preventing potential vulnerabilities like SQL injection, XSS, hardcoded secrets, and more.

Core Features & Use Cases

  • Security Auditing: Performs in-depth security analysis for common vulnerabilities.
  • Critical Vulnerability Detection: Identifies severe threats such as SQL injection, XSS, and hardcoded secrets.
  • Remediation Guidance: Offers remediation strategies and examples to mitigate vulnerabilities.

Quick Start

Run the security-check skill to audit your codebase for common security issues.

Frequently Asked Questions about security-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for SQL injection and XSS vulnerabilities?

To scan your codebase for SQL injection and XSS vulnerabilities, run an automated security audit to identify potential risks in application code and ensure security compliance. This process detects severe threats and provides remediation guidance to mitigate them.

What is the best way to detect hardcoded secrets in my application code?

Detecting hardcoded secrets in application code is best handled by an automated security audit that scans your codebase for potential risks. This approach identifies exposed secrets and offers remediation strategies to ensure security compliance.

Can I use bash and grep to automate security auditing for insecure serialization?

You can automate security auditing for insecure serialization using bash and grep scripts to scan your codebase. This setup identifies potential risks in application code and provides remediation guidance to ensure security compliance.

Does this automated security audit provide remediation guidance for detected vulnerabilities?

Yes, the automated security audit provides remediation guidance for detected vulnerabilities. After identifying severe threats like SQL injection, XSS, and hardcoded secrets, it offers strategies and examples to mitigate them and ensure compliance.

Do I need pip and git-secrets installed to run a vulnerability detection scan?

You need pip, git-secrets, and detect-secrets installed to run a vulnerability detection scan. These dependencies enable the bash and grep scripts to identify hardcoded secrets and other risks in your application code.

When should I perform a security compliance audit on my codebase?

You should perform a security compliance audit on your codebase to identify potential risks like SQL injection, XSS, and insecure serialization before deployment. This ensures application code security and provides remediation strategies to mitigate vulnerabilities.