skills.rest
martialarcon
martialarconCOMMUNITY
Explore all skills by this author →
GitHub

security-check

Validate project security policies for hardcoded secrets, rootless containers, ARM64 dependencies, and secure Dockerfiles.

1|Updated Feb 15, 2026
Search Tags:#code review#security#dependencies#docker#secrets#arm64
One-click install
npx skills add https://github.com/martialarcon/claude-code-expert --skill security-check-martialarcon
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-check
Source: https://github.com/martialarcon/claude-code-expert/tree/main/.claude/skills/security-check
Command: npx skills add https://github.com/martialarcon/claude-code-expert --skill security-check-martialarcon

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps ensure your project adheres to security best practices by automatically checking for hardcoded secrets, insecure Docker configurations, and compatibility issues with ARM64 architectures.

Core Features & Use Cases

  • Secret Detection: Scans code for common patterns of hardcoded secrets like passwords and API keys.
  • Dockerfile & Docker Compose Validation: Reviews Docker configurations for security vulnerabilities such as running as root, unnecessary installations, and improper privilege escalation.
  • Dependency Analysis: Checks for ARM64 compatibility in project dependencies.
  • Use Case: Run this skill before committing code or after modifying Dockerfiles to proactively identify and fix potential security flaws.

Quick Start

Run the security-check skill to validate project security policies.

Frequently Asked Questions about security-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my project for hardcoded secrets before committing code?▼

To scan for hardcoded secrets before committing, you can run a security check that uses grep and bash tools to analyze file contents for common patterns of passwords and API keys. This proactively identifies potential vulnerabilities in your codebase.

How do I validate my Dockerfile for security vulnerabilities like running as root?▼

Validating your Dockerfile for security vulnerabilities involves checking configurations for improper privilege escalation and root access. This security check reviews Dockerfiles and docker-compose files to identify unnecessary installations and insecure permission setups.

What is the best way to check project dependencies for ARM64 compatibility?▼

Checking project dependencies for ARM64 compatibility involves analyzing your project's dependency tree to ensure all packages support the ARM64 architecture. This skill performs dependency analysis to catch architecture-specific issues early in the development cycle.

Can I use automated security checks for pull request reviews?▼

Yes, you can use automated security checks for pull request reviews. This skill applies to pre-commit checks and pull request reviews, scanning modified Dockerfiles and code to ensure adherence to security best practices before merging.

Does this security check work with docker-compose files or only standalone Dockerfiles?▼

This security check works with both docker-compose files and standalone Dockerfiles. It utilizes glob tools for file system analysis to locate and review both configuration types for rootless container setups and secure Docker practices.

Related Skills

Explore More Software Engineering Skills→
diarworlddiarworld
6

ai-factory.dockerize

Generates Dockerfiles, Compose files, and .dockerignore with security audit.

Community
Advanced
GaryOcean428GaryOcean428

security-audit

Detect secrets, insecure dependencies, and vulnerable patterns in codebases.

Community
Advanced
arcasilesgrouparcasilesgroup
54

ai-pr

Automate governed pull request workflows with pre-push gates and squash merge.

Official
Advanced
Logos-LiberLogos-Liber
17

vulnerability-scanning

Identifies security vulnerabilities in code, dependencies, and container images.

Official
Advanced