skills.rest
kocakburhan
kocakburhanCOMMUNITY
Explore all skills by this author →
GitHub

security-check

Automate multi-language codebase security scans with a 4-phase pipeline.

Updated Aug 23, 2026
Search Tags:#automation#architecture#checklist#security#audit#agentskills
One-click install
npx skills add https://github.com/kocakburhan/emlakdefter --skill security-check-kocakburhan
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-check
Source: https://github.com/kocakburhan/emlakdefter/tree/main/.agents/skills/security-check
Command: npx skills add https://github.com/kocakburhan/emlakdefter --skill security-check-kocakburhan

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

security-check automates comprehensive AI-powered security scans of codebases by coordinating a broad suite of agent skills to discover, verify, and report vulnerabilities.

Core Features & Use Cases

  • 4-stage security pipeline: Recon, Hunt, Verify, and Report orchestrated across language-specific and generic vulnerability skills.
  • Multi-language coverage: Supports Go, TypeScript/JavaScript, Python, PHP, Rust, Java, and C#, with language-specific checklists and deep scanners.
  • PR/diff and full-scan modes: Scans entire repositories or changes in PRs, generating structured security reports.

Quick Start

Activate the security-check workflow in your AI assistant by prompting it to run a full security check.

Frequently Asked Questions about security-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate a security audit for a multi-language codebase?▼

You can automate a security audit by running a 4-phase pipeline that coordinates language-specific checklists and deep scanners across Go, TypeScript/JavaScript, Python, PHP, Rust, Java, and C# repositories to discover and report vulnerabilities.

Can I run a security scan on just the PR diff instead of the whole repository?▼

Yes, security scanning supports PR diff modes to analyze code changes incrementally, as well as full-scan modes to evaluate entire repositories, generating structured security reports for either scenario.

How does AI-powered vulnerability verification work during a codebase security check?▼

AI-powered vulnerability verification works through a structured pipeline that progresses from reconnaissance to hunting, then verifies discovered issues to eliminate false positives before generating an executive security report.

What is the best way to generate an executive security report for pull requests?▼

The best way to generate an executive security report is using an orchestrated security pipeline that applies parallel vulnerability scanning to PR diffs and consolidates verified findings into a final structured document.

Does automated security scanning require manual checklist configuration for different programming languages?▼

No, automated security scanning uses built-in language-specific checklists for Go, TypeScript/JavaScript, Python, PHP, Rust, Java, and C# automatically, requiring no manual checklist configuration to start the pipeline.

Why use an orchestrated agent pipeline for repository security audits instead of standalone scanners?▼

An orchestrated agent pipeline coordinates multiple language-specific and generic vulnerability skills in parallel, providing end-to-end discovery and verification across multi-language repositories that standalone scanners cannot achieve alone.

Related Skills

Explore More Software Engineering Skills→
BerryKuipersBerryKuipers
7

check-existing-pr

Check for existing pull requests on the current branch via gh and jq.

Community
Intermediate
josavicentevwjosavicentevw
1

devsecops

Automate security scanning and governance across CI/CD pipelines and compliance workflows.

Community
Advanced
LuisSambranoLuisSambrano
7

code-review

Perform systematic code review and static analysis across multiple programming languages.

Community
Advanced
pdparchitectpdparchitect
13

hunt-dispatch

Fingerprint target infrastructure and load context-specific security attack modules.

Community
Advanced