Audit codebases for OWASP Top 10 and STRIDE threats with evidence-backed reports.
npx skills add https://github.com/garagon/nanostack --skill security-garagon
Please help me install this Agent Skill. Skill: security Source: https://github.com/garagon/nanostack/tree/main/security Command: npx skills add https://github.com/garagon/nanostack --skill security-garagon
Many releases fail because critical vulnerabilities, leaked secrets, or insecure CI/dependency configurations are missed until after deployment. This Skill systematically uncovers OWASP Top 10 issues, secret exposures in code and history, and architectural threats so teams can remediate before shipping.
Use the security skill to run an OWASP Top 10 and STRIDE audit over the repository and produce an actionable report.
High-intent search queries and answers about installing and using this skill.
To run an OWASP Top 10 security audit, execute this Skill against your pre-release branch or pull request to systematically uncover vulnerabilities and generate an evidence-backed report with file locations, exploitation steps, and code fixes.
Yes, you can detect hardcoded secrets by running a secrets scan that checks your code and Git history for exposed credentials, redacts them, and provides actionable advice to secure your repository before shipping.
STRIDE threat modeling is a structured approach to identifying architectural threats, and this Skill applies it per component to systematically discover security risks across web, backend, and library repositories during pre-ship checks.
Yes, this security audit reviews CI/CD workflows and Docker configurations to detect unpinned GitHub Actions, exposed secrets in workflows, Docker misconfigs, and AI endpoint risks to prevent insecure deployments.
You can scan dependencies for known vulnerabilities by running this Skill against your repository manifests to perform dependency vulnerability audits and receive actionable upgrade advice for at-risk packages.
The best way to find and fix insecure dependency configurations is to run this Skill on a pre-release branch to audit manifests, identify vulnerabilities, and produce a report detailing precise code fixes and remediation steps.
cegit27Audit infrastructure security across secrets, dependencies, CI/CD, and LLM/AI.
jMertaGenerate Markdown release notes from git history and merged PRs.
flatrickAutomate Django project verification with linters, tests, and security scans.
BagelHolePerform DAST scans on web applications and APIs with OWASP ZAP.
