security-check

Scan codebases for secrets, injections, auth flaws, and dependency vulnerabilities.

Updated Jul 10, 2023

Search Tags:#security #vulnerability #owasp #reporting #code-review #secret-detection #dependency-scan

Ready to run

npx skills add https://github.com/iamtatsuki05/dotfiles --skill security-check-iamtatsuki05

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-check
Source: https://github.com/iamtatsuki05/dotfiles/tree/main/dotfiles/.agent/skills/security-check
Command: npx skills add https://github.com/iamtatsuki05/dotfiles --skill security-check-iamtatsuki05

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Systematically detect and analyze security vulnerabilities in a codebase, enabling proactive remediation and secure development practices.

Core Features & Use Cases

Phase-based security review workflow covering secret scanning, injection checks, authentication/authorization, dependency checks, and reporting.
Project-wide audits or targeted file/PR reviews with actionable findings.
Use cases include OWASP-style assessments, secret leakage detection, and secure-by-default coding guidance.

Quick Start

Provide a security review request to start the assessment workflow across the project.

Frequently Asked Questions about security-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate security reviews and vulnerability reporting for my codebase?▼

Run a phase-based security review workflow across your entire project or specific pull requests to identify vulnerabilities, outputting a comprehensive report with severity-ranked findings and actionable remediation guidance.

What is the best way to detect secret leakage and injection vulnerabilities in code?▼

Detect leaked secrets and injection vulnerabilities by applying phase-based secret scanning and injection checks to your entire project or targeted files, systematically identifying security flaws before deployment.

Can I perform an OWASP-style assessment on specific pull requests instead of a full project?▼

Yes, you can perform targeted OWASP-style assessments on specific pull requests or files, applying authentication, authorization, and dependency checks without scanning the entire project.

Does the security vulnerability scan include dependency checks and CI/CD integration?▼

Yes, the security vulnerability scan includes Phase 4 dependency checks and is configurable to integrate with CI/CD workflows, ensuring secure development practices are maintained automatically.

How do I get remediation guidance for security vulnerabilities found during a code review?▼

Generate remediation guidance by completing the five-phase security review, which produces a comprehensive report containing severity-ranked findings and actionable secure-by-default coding guidance.

muggl3mind

onboarding

Read resumes, ask structured questions, and generate configuration files for job search automation.

Community

Intermediate

GDSDN

qa-security-checklist

Scan codebases for predefined vulnerability patterns and generate severity reports.

Community

Advanced

dan323

find-dead-code

Detect unused code across Java, Python, JavaScript and other languages, accounting for reflection and dependency injection to prevent false positives.

Community

Intermediate