security-check

Detect authentication gaps, injection flaws, exposed endpoints, and secrets leakage in code and configurations.

16|3|Updated Mar 15, 2026
One-click install
npx skills add https://github.com/YehudaFrankel/clankbrain --skill security-check-yehudafrankel
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-check
Source: https://github.com/YehudaFrankel/clankbrain/tree/main/.claude/skills/03-security
Command: npx skills add https://github.com/YehudaFrankel/clankbrain --skill security-check-yehudafrankel

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security teams and developers often miss authentication gaps, SQL injection risks, exposed endpoints, and sensitive data leaks in code and configurations. This Skill automates a comprehensive security audit to surface defects early, reducing risk and manual review time.

Core Features & Use Cases

  • Authentication checks: detect missing or weak auth enforcement across APIs and services.
  • Injection and endpoint hygiene: identify SQL injections, unsafe eval, and endpoints that bypass authorization checks.
  • Secrets detection & data exposure: surface hard-coded credentials, API keys, and sensitive data leakage in responses or logs.
  • Use Case: Use during CI/security reviews to quickly generate an actionable vulnerability report for a codebase.

Quick Start

Run a security audit on the target repository to enumerate authentication gaps, injection risks, exposed endpoints, and potential data leaks.

Frequently Asked Questions about security-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for authentication gaps and exposed endpoints?

To scan for authentication gaps and exposed endpoints, run an automated security audit across your applications and APIs. This process enforces static pattern checks and dynamic scanning to surface weak auth enforcement and bypassed authorization checks.

What is the best way to detect hard-coded secrets and API keys in configurations?

Detecting hard-coded secrets and API keys requires automated secrets detection scans across your code and configurations. This surfaces sensitive data leakage and credentials early, providing clear remediation guidance to secure your infrastructure.

Can I use automated security audits to find SQL injection and unsafe eval risks?

Yes, you can use automated security audits to identify SQL injection and unsafe eval risks. The scan applies static pattern checks to pinpoint injection flaws and endpoint hygiene issues during your CI pipelines or runtime assessments.

Does this security review tool work without external dependencies?

Yes, this security review tool works without external dependencies. It operates independently to apply policy-driven reporting and static pattern checks, delivering actionable vulnerability findings without requiring additional environment setup.

When do I need to run a code vulnerability and secrets detection audit?

You need to run a code vulnerability and secrets detection audit during CI pipelines, security reviews, and runtime assessments. This early surface of authentication gaps, injection flaws, and data exposure reduces manual review time and security risks.