security-detection

Identifies security-critical changes in code and configuration for review.

Updated Jan 19, 2026
One-click install
npx skills add https://github.com/loriensleafs/brain --skill security-detection
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-detection
Source: https://github.com/loriensleafs/brain/tree/main/apps/claude-plugin/skills/security-detection
Command: npx skills add https://github.com/loriensleafs/brain --skill security-detection

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill detects infrastructure and security-critical file changes to trigger security agent review recommendations, ensuring proper security oversight for sensitive modifications.

Core Features & Use Cases

  • Detects critical and high-risk changes across code, configuration, and CI/CD files.
  • Supports both git-staged analysis and direct file analysis for flexible workflows.
  • Produces clear risk signals to drive security reviews and remediation actions.

Quick Start

Run the detection on staged changes:

  • Python: python detect_infrastructure.py --git-staged
  • PowerShell: pwsh -File detect-infrastructure.ps1 -UseGitStaged Or analyze specific files:
  • python detect_infrastructure.py path/to/file1 path/to/file2

Frequently Asked Questions about security-detection

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect security-critical changes in staged git files?

To detect security-critical changes in staged git files, run the detection script using either Python with the --git-staged flag or PowerShell with the -UseGitStaged parameter. It scans staged modifications against defined critical and high-risk patterns to produce clear risk signals for security review.

Can I scan specific configuration and CI/CD files for security risks without using git?

Yes, you can scan specific configuration and CI/CD files for security risks by passing explicit file paths directly to the detection script. This direct file analysis identifies critical and high-risk changes without requiring a git staging step.

What is security-critical change detection for code review?

Security-critical change detection for code review is the process of scanning code, configuration, and CI/CD files against defined high-risk patterns. It identifies sensitive modifications to trigger security agent review recommendations and ensure proper security oversight.

Does this security detection tool require any external dependencies to run?

No, this security detection tool has minimal dependencies and requires no external packages. It relies on built-in Python or PowerShell environments to execute cross-platform file scanning and risk detection.

What types of files are considered high-risk during infrastructure security scanning?

During infrastructure security scanning, high-risk files include modifications to code, configuration files, and CI/CD pipelines. The tool analyzes these file sets against defined critical patterns to determine security risk and trigger reviews.

How do I trigger a security review for sensitive infrastructure modifications?

You trigger a security review for sensitive infrastructure modifications by running the detection script on git-staged changes or explicit file lists. The scan produces clear risk signals that drive security agent review recommendations and remediation actions.