skills.rest
iamtatsuki05
iamtatsuki05COMMUNITY
Explore all skills by this author →
Website𝕏@iam_tatsuki05GitHub

security-check

Scan codebases for secrets, injections, auth flaws, and dependency vulnerabilities.

Updated Jul 10, 2023
Search Tags:#security#vulnerability#owasp#reporting#code-review#secret-detection#dependency-scan
One-click install
npx skills add https://github.com/iamtatsuki05/dotfiles --skill security-check-iamtatsuki05
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-check
Source: https://github.com/iamtatsuki05/dotfiles/tree/main/dotfiles/.agent/skills/security-check
Command: npx skills add https://github.com/iamtatsuki05/dotfiles --skill security-check-iamtatsuki05

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Systematically detect and analyze security vulnerabilities in a codebase, enabling proactive remediation and secure development practices.

Core Features & Use Cases

  • Phase-based security review workflow covering secret scanning, injection checks, authentication/authorization, dependency checks, and reporting.
  • Project-wide audits or targeted file/PR reviews with actionable findings.
  • Use cases include OWASP-style assessments, secret leakage detection, and secure-by-default coding guidance.

Quick Start

Provide a security review request to start the assessment workflow across the project.

Frequently Asked Questions about security-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security reviews and vulnerability reporting for my codebase?▼

Run a phase-based security review workflow across your entire project or specific pull requests to identify vulnerabilities, outputting a comprehensive report with severity-ranked findings and actionable remediation guidance.

What is the best way to detect secret leakage and injection vulnerabilities in code?▼

Detect leaked secrets and injection vulnerabilities by applying phase-based secret scanning and injection checks to your entire project or targeted files, systematically identifying security flaws before deployment.

Can I perform an OWASP-style assessment on specific pull requests instead of a full project?▼

Yes, you can perform targeted OWASP-style assessments on specific pull requests or files, applying authentication, authorization, and dependency checks without scanning the entire project.

Does the security vulnerability scan include dependency checks and CI/CD integration?▼

Yes, the security vulnerability scan includes Phase 4 dependency checks and is configurable to integrate with CI/CD workflows, ensuring secure development practices are maintained automatically.

How do I get remediation guidance for security vulnerabilities found during a code review?▼

Generate remediation guidance by completing the five-phase security review, which produces a comprehensive report containing severity-ranked findings and actionable secure-by-default coding guidance.

Related Skills

Explore More Software Engineering Skills→
muggl3mindmuggl3mind
24

onboarding

Read resumes, ask structured questions, and generate configuration files for job search automation.

Community
Intermediate
GDSDNGDSDN
3

qa-security-checklist

Scan codebases for predefined vulnerability patterns and generate severity reports.

Community
Advanced
dan323dan323
7

find-dead-code

Detect unused code across Java, Python, JavaScript and other languages, accounting for reflection and dependency injection to prevent false positives.

Community
Intermediate
matteocervellimatteocervelli
25

security-scanner

Scan codebases for secrets, vulnerable dependencies, and insecure patterns.

Community
Advanced