skills.rest
buurguees
buurgueesCOMMUNITY
Explore all skills by this author →
GitHub

security-checks

Scan web projects for secrets, insecure configurations, dependency vulnerabilities, and weak authentication.

1|Updated Dec 30, 2025
Search Tags:#security#compliance#config#secrets#web-security#hardening#dependency-audit
One-click install
npx skills add https://github.com/buurguees/av-tech-p-gina-de-inicio --skill security-checks
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-checks
Source: https://github.com/buurguees/av-tech-p-gina-de-inicio/tree/main/.agents/skills/security-checks
Command: npx skills add https://github.com/buurguees/av-tech-p-gina-de-inicio --skill security-checks

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Web projects often suffer from security gaps like leaked secrets, vulnerable dependencies, insecure configurations, and weak access controls, leading to risk exposure and compliance issues.

Core Features & Use Cases

  • Secrets & Credential Audit: Detect secrets in code and config, enforce environment-based handling.
  • Dependency & Configuration Review: Identify known vulnerabilities and insecure settings in dependencies.
  • Auth & Hardening Checks: Validate authentication controls and basic hardening best practices across the stack.
  • Remediation Planning: Prioritize findings and provide actionable remediation steps for development teams.

Quick Start

Run a security assessment on your repository to surface secrets, vulnerable dependencies, misconfigurations, and auth weaknesses, then review the prioritized remediation plan.

Frequently Asked Questions about security-checks

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my web project for leaked secrets and vulnerable dependencies?▼

Scanning web projects for leaked secrets and vulnerable dependencies involves applying a security assessment to your code repositories or pull requests. This process surfaces exposed credentials and known dependency vulnerabilities, delivering prioritized findings with actionable remediation steps.

What is configuration hardening and when do I need it for my web application?▼

Configuration hardening is the process of identifying and fixing insecure settings in web projects to reduce risk exposure. You need it before release and during ongoing development to satisfy compliance requirements and prevent security gaps from reaching production.

How do I validate authentication controls and access management in my codebase?▼

To validate authentication controls in a codebase, run hardening checks across the stack to detect weak access controls. The assessment reviews authentication implementations and provides prioritized guidance to strengthen basic auth controls.

Does this security check approach work with deployment pipelines and pull requests?▼

Yes, this security check approach works with deployment pipelines and pull requests. Applying the assessment surfaces issues like secret exposure and misconfigurations before release and during ongoing development, ensuring continuous risk identification.

What is the best way to prioritize web security risks found in my repository?▼

Prioritizing web security risks found in a repository is best achieved by using an assessment tool that evaluates secrets, dependencies, and configurations. It automatically ranks findings and delivers a prioritized remediation plan for development teams.

Related Skills

Explore More Software Engineering Skills→
lionbenjaminlionbenjamin
15

security_agent

Review Node.js and React applications for OWASP Top 10 vulnerabilities.

Community
Advanced
micaelmaltamicaelmalta
1

security-reviewer

Identify and remediate security vulnerabilities across code, configuration, and architecture.

Community
Advanced
BenWork17BenWork17

vulnerability-scanner

Identify and prioritize software vulnerabilities across code repositories and CI/CD pipelines.

Community
Advanced
matteocervellimatteocervelli
25

security-scanner

Scan codebases for secrets, vulnerable dependencies, and insecure patterns.

Community
Advanced