security-detection

Identifies security-critical changes in code and configuration for review.

Updated Jan 19, 2026

Search Tags:#git #ci/cd #security #compliance #infrastructure #code-review #risk-detection

Ready to run

npx skills add https://github.com/loriensleafs/brain --skill security-detection

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-detection
Source: https://github.com/loriensleafs/brain/tree/main/apps/claude-plugin/skills/security-detection
Command: npx skills add https://github.com/loriensleafs/brain --skill security-detection

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill detects infrastructure and security-critical file changes to trigger security agent review recommendations, ensuring proper security oversight for sensitive modifications.

Core Features & Use Cases

Detects critical and high-risk changes across code, configuration, and CI/CD files.
Supports both git-staged analysis and direct file analysis for flexible workflows.
Produces clear risk signals to drive security reviews and remediation actions.

Quick Start

Run the detection on staged changes:

Python: python detect_infrastructure.py --git-staged
PowerShell: pwsh -File detect-infrastructure.ps1 -UseGitStaged Or analyze specific files:
python detect_infrastructure.py path/to/file1 path/to/file2

Frequently Asked Questions about security-detection

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I detect security-critical changes in staged git files?▼

To detect security-critical changes in staged git files, run the detection script using either Python with the --git-staged flag or PowerShell with the -UseGitStaged parameter. It scans staged modifications against defined critical and high-risk patterns to produce clear risk signals for security review.

Can I scan specific configuration and CI/CD files for security risks without using git?▼

Yes, you can scan specific configuration and CI/CD files for security risks by passing explicit file paths directly to the detection script. This direct file analysis identifies critical and high-risk changes without requiring a git staging step.

What is security-critical change detection for code review?▼

Security-critical change detection for code review is the process of scanning code, configuration, and CI/CD files against defined high-risk patterns. It identifies sensitive modifications to trigger security agent review recommendations and ensure proper security oversight.

Does this security detection tool require any external dependencies to run?▼

No, this security detection tool has minimal dependencies and requires no external packages. It relies on built-in Python or PowerShell environments to execute cross-platform file scanning and risk detection.

What types of files are considered high-risk during infrastructure security scanning?▼

During infrastructure security scanning, high-risk files include modifications to code, configuration files, and CI/CD pipelines. The tool analyzes these file sets against defined critical patterns to determine security risk and trigger reviews.

How do I trigger a security review for sensitive infrastructure modifications?▼

You trigger a security review for sensitive infrastructure modifications by running the detection script on git-staged changes or explicit file lists. The scan produces clear risk signals that drive security agent review recommendations and remediation actions.