security-check

Automate multi-language codebase security scans with a 4-phase pipeline.

Updated Aug 23, 2026

Search Tags:#automation #architecture #checklist #security #audit #agentskills

Ready to run

npx skills add https://github.com/kocakburhan/emlakdefter --skill security-check-kocakburhan

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-check
Source: https://github.com/kocakburhan/emlakdefter/tree/main/.agents/skills/security-check
Command: npx skills add https://github.com/kocakburhan/emlakdefter --skill security-check-kocakburhan

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

security-check automates comprehensive AI-powered security scans of codebases by coordinating a broad suite of agent skills to discover, verify, and report vulnerabilities.

Core Features & Use Cases

4-stage security pipeline: Recon, Hunt, Verify, and Report orchestrated across language-specific and generic vulnerability skills.
Multi-language coverage: Supports Go, TypeScript/JavaScript, Python, PHP, Rust, Java, and C#, with language-specific checklists and deep scanners.
PR/diff and full-scan modes: Scans entire repositories or changes in PRs, generating structured security reports.

Quick Start

Activate the security-check workflow in your AI assistant by prompting it to run a full security check.

Frequently Asked Questions about security-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate a security audit for a multi-language codebase?▼

You can automate a security audit by running a 4-phase pipeline that coordinates language-specific checklists and deep scanners across Go, TypeScript/JavaScript, Python, PHP, Rust, Java, and C# repositories to discover and report vulnerabilities.

Can I run a security scan on just the PR diff instead of the whole repository?▼

Yes, security scanning supports PR diff modes to analyze code changes incrementally, as well as full-scan modes to evaluate entire repositories, generating structured security reports for either scenario.

How does AI-powered vulnerability verification work during a codebase security check?▼

AI-powered vulnerability verification works through a structured pipeline that progresses from reconnaissance to hunting, then verifies discovered issues to eliminate false positives before generating an executive security report.

What is the best way to generate an executive security report for pull requests?▼

The best way to generate an executive security report is using an orchestrated security pipeline that applies parallel vulnerability scanning to PR diffs and consolidates verified findings into a final structured document.

Does automated security scanning require manual checklist configuration for different programming languages?▼

No, automated security scanning uses built-in language-specific checklists for Go, TypeScript/JavaScript, Python, PHP, Rust, Java, and C# automatically, requiring no manual checklist configuration to start the pipeline.

Why use an orchestrated agent pipeline for repository security audits instead of standalone scanners?▼

An orchestrated agent pipeline coordinates multiple language-specific and generic vulnerability skills in parallel, providing end-to-end discovery and verification across multi-language repositories that standalone scanners cannot achieve alone.