Security Detection Utility

Detect critical security risks in staged Git files using regex patterns.

41|13|Updated Dec 14, 2025

Search Tags:#automation #git #security #infrastructure #detection #tools

Ready to run

npx skills add https://github.com/rjmurillo/ai-agents --skill security-detection-utility

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: Security Detection Utility
Source: https://github.com/rjmurillo/ai-agents/tree/main/.agents/utilities/security-detection
Command: npx skills add https://github.com/rjmurillo/ai-agents --skill security-detection-utility

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Detect infrastructure and security-critical file changes to trigger security agent review recommendations.

Core Features & Use Cases

Staged-file analysis: Quickly identify which changed files pose security risk.
Risk levels & guidance: Distinguishes critical vs high risks with actionable output.
CI and pre-commit friendly: Non-blocking exit codes, easy integration into development workflows.

Quick Start

Analyze staged files: python detect_infrastructure.py --git-staged

Analyze specific files: python detect_infrastructure.py .github/workflows/ci.yml src/auth/login.cs

Frequently Asked Questions about Security Detection Utility

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I detect security-critical changes in my Git repository?▼

Detect security-critical file changes by analyzing staged files with pattern-based detection. Run `python detect_infrastructure.py --git-staged` to identify infrastructure and authentication files that pose risk, then review them before committing.

What file types does security detection flag as high-risk?▼

Security detection flags infrastructure files (CI/CD workflows, Terraform, CloudFormation), authentication code, secrets management, and access control files using defined regular expressions. Risk levels distinguish critical from high-risk patterns.

Can I integrate security detection into my CI/CD workflow?▼

Yes, security detection integrates into CI/CD workflows and pre-commit hooks with non-blocking exit codes. Analyze specific files or staged changes across Python 3 and PowerShell environments for cross-platform use.

How do I analyze specific files instead of staged changes?▼

Analyze specific files by passing them directly: `python detect_infrastructure.py .github/workflows/ci.yml src/auth/login.cs`. The utility scans explicitly listed files and outputs structured risk findings with actionable guidance.

What output does the detection utility provide?▼

The utility outputs structured findings that distinguish critical from high-risk patterns, with recommendations to trigger security agent review. Results integrate seamlessly into pre-commit and CI workflows without blocking builds.

Does security detection work with project directories outside Git?▼

Yes, security detection applies to Git-based repositories, CI/CD workflows, and project directories. Analyze staged files or explicitly list files; the utility supports cross-platform execution via Python 3 and PowerShell.