skills.rest
darylmcd
darylmcdCOMMUNITY
Explore all skills by this author →
GitHub

security

Identify and remediate security issues in C# solutions via Roslyn analysis and NuGet CVE checks.

Updated Mar 13, 2026
Search Tags:#csharp#security#vulnerability#diagnostics#nuget#roslyn#analyzers
One-click install
npx skills add https://github.com/darylmcd/Roslyn-Backed-MCP --skill security-darylmcd
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security
Source: https://github.com/darylmcd/Roslyn-Backed-MCP/tree/main/skills/security
Command: npx skills add https://github.com/darylmcd/Roslyn-Backed-MCP --skill security-darylmcd

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security auditing of C# solutions to identify vulnerabilities, risky configurations, and insecure dependencies, enabling proactive remediation.

Core Features & Use Cases

  • Roslyn-based security diagnostics across projects and solutions; NuGet vulnerability checks against CVEs; analysis of reflection usage and DI registrations to surface risk areas; guidance for remediation and secure design decisions.

Quick Start

Run a security audit on the loaded workspace with an optional project name to scope the analysis.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security audit on a C# solution to find vulnerabilities?▼

To run a C# security audit, apply this Skill to your loaded workspace to conduct Roslyn-based diagnostics, analyze reflection usage and DI registrations, and generate a categorized risk report with actionable remediation guidance.

Can I check my NuGet packages for known CVEs in C#?▼

Yes, you can check NuGet packages for known CVEs. The Skill performs dependency vetting across your C# solution to identify vulnerable NuGet packages and provides actionable remediation guidance within a developer-friendly report.

Does Roslyn analyzer support scanning dependency injection registrations for security risks?▼

Yes, Roslyn analysis supports scanning dependency injection registrations. The Skill analyzes DI registrations and reflection usage across workspace-scoped projects to surface security risk areas and suggest secure design decisions.

What is the best way to scope C# security diagnostics to a specific project?▼

The best way to scope C# security diagnostics is to provide an optional project name when applying the Skill to your loaded workspace. This limits the Roslyn-based analysis and CVE checks to the specified project instead of the entire solution.

How are security vulnerabilities categorized in the diagnostic report?▼

Security vulnerabilities are categorized by risk in the diagnostic report. The Skill ensures findings from the C# solution analysis are structured into a developer-friendly report with actionable remediation guidance for each identified risk area.

Related Skills

Explore More Software Engineering Skills→
AGIBuildAGIBuild
10

dotnet-build-analysis

Interpret .NET build errors and warnings from MSBuild, C#, NuGet, and Roslyn analyzers.

Community
Advanced
erikliebeneriklieben
7

dev-dependency-backend

Audit and update NuGet packages for C#/.NET projects with risk-based triage.

Community
Advanced
TymorIbrahimTymorIbrahim

springboot-verification

Automates build, static analysis, tests, security scan, and code review for Spring Boot projects.

Community
Advanced
offers-pngoffers-png

security_scan

Run dependency, SAST, and HoundDog scans in parallel and report vulnerabilities.

Community
Advanced