What problem does it solve?
This Skill provides a comprehensive security audit for repositories and branches, identifying vulnerabilities, misconfigurations, and potential risks before code is pushed or merged.
Core Features & Use Cases
- Full-Repo Audit: Conduct a thorough security audit for the entire repository, covering all surfaces, dependencies, and configurations.
- Branch/Diff Review: Review specific branches or pull requests for security issues, including code changes and dependencies.
- Merge-Impact Assessment: Assess the impact of changes on the repository's security posture before merging.
- Adversarial Review/Red-Team: Simulate an attacker's perspective to identify security weaknesses that might be overlooked by traditional audits.
- Use Case: Before deploying a new feature, use this Skill to perform a full-repo audit to ensure there are no security vulnerabilities that could be exploited.
Quick Start
Run a full security audit for your repository with 'security-check run full-repo'.