security

Audit code for vulnerabilities using SAST, dependency auditing, secrets detection, and compliance checks.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/Git-Fg/taches-principled-light --skill security-git-fg
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security
Source: https://github.com/Git-Fg/taches-principled-light/tree/main/skills/security
Command: npx skills add https://github.com/Git-Fg/taches-principled-light --skill security-git-fg

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill streamlines the process of auditing code for security vulnerabilities and compliance issues, helping to ensure the security and reliability of your software.

Core Features & Use Cases

  • Security Audits: Automated scanning for vulnerabilities, including SAST, dependency auditing, secrets detection, and compliance checks.
  • Compliance: Checks against standards like OWASP, GDPR, SOC2, and PCI-DSS.
  • Use Case: Use this Skill to conduct a security audit before a production deployment, check for outdated dependencies, or find exposed credentials.

Quick Start

Run a security audit on your codebase with the 'security' skill.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security audit on my codebase before deployment?

To run a security audit before deployment, use this Skill to conduct SAST, dependency auditing, secrets detection, and compliance checks. It scans your codebase for potential vulnerabilities and exposed credentials to ensure software reliability.

What is SAST and how does it find vulnerabilities in my code?

SAST, or Static Application Security Testing, is a mechanism that scans source code to find potential security vulnerabilities without executing the program. This Skill uses SAST to identify security flaws and ensure code security.

Can I check my code for OWASP, GDPR, and PCI-DSS compliance automatically?

Yes, you can automatically check code for OWASP, GDPR, SOC2, and PCI-DSS compliance. The Skill evaluates your codebase against these specific compliance standards to identify regulatory or security posture issues.

Does secrets detection find exposed credentials in my source files?

Yes, secrets detection scans your source files to find exposed credentials and hardcoded secrets. This Skill integrates secrets detection into its comprehensive security audit to prevent accidental credential leaks.

Do I need any specific tools installed for dependency auditing to work?

Dependency auditing requires tools like Read, Grep, Glob, Bash, and Edit for execution. These tools allow the Skill to scan project files and analyze dependencies for known vulnerabilities or outdated libraries.