Detect security vulnerabilities and output a prioritized remediation plan.
npx skills add https://github.com/j0KZ/mcp-agents --skill security-first
Please help me install this Agent Skill. Skill: security-first Source: https://github.com/j0KZ/mcp-agents/tree/main/docs/universal-skills/security-first Command: npx skills add https://github.com/j0KZ/mcp-agents --skill security-first
This Skill provides a universal security checklist and fixes to prevent vulnerabilities across any project, reducing risk and saving remediation time.
Run a 5-minute security audit on your codebase to block vulnerabilities before production.
High-intent search queries and answers about installing and using this skill.
Run a security audit on your codebase to identify vulnerabilities across OWASP Top 10 categories, hardcoded secrets, injection flaws, insecure dependencies, and misconfigurations. The Skill scans any project type or language and outputs a prioritized remediation plan with concrete fixes and secure-by-default patterns to block risks before production.
Yes. Security vulnerability detection applies universally across any project type and language, making it suitable for pre-production audits, CI pipelines, and codebases handling sensitive data, API endpoints, user input, file uploads, and payments without language-specific constraints.
The Skill scans your codebase to detect hardcoded keys and secrets quickly, identifying exposure risks. Once found, remediation guidance helps you remove or rotate compromised credentials and implement secure secret management practices.
OWASP-aligned checks cover injection flaws, broken authentication, sensitive data exposure, XML external entities, broken access control, security misconfiguration, cross-site scripting, insecure deserialization, using components with known vulnerabilities, and insufficient logging. Results include concrete fixes and secure-by-default patterns.
A security audit runs in approximately 5 minutes, providing a rapid assessment of your codebase. This quick scan blocks vulnerabilities before production without lengthy setup or configuration requirements.
The Skill outputs a prioritized remediation plan with concrete fixes and secure-by-default patterns. You implement recommended changes for encryption, input validation, access control, and dependency updates based on severity and business context.
SethGammonScan configuration and environment files to map project infrastructure dependencies.
buurgueesScan web projects for secrets, insecure configurations, dependency vulnerabilities, and weak authentication.
BryantChiImplement dependency governance and integrate SCA scans into CI pipelines.
zangxin75Conduct security audits and code vulnerability reviews with SAST scans.
