skills.rest
JFrangel
JFrangelCOMMUNITY
Explore all skills by this author →
GitHub

security-guard

Detects and remediates security vulnerabilities in code, infrastructure, and architecture using OWASP and DevSecOps standards for pre-production environments.

Updated Mar 5, 2026
Search Tags:#security#vulnerability#owasp#secure coding#audit#devsecops
One-click install
npx skills add https://github.com/JFrangel/AI-Agents-Skills --skill security-guard-jfrangel
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-guard
Source: https://github.com/JFrangel/AI-Agents-Skills/tree/main/public/skills/devops/security-guard
Command: npx skills add https://github.com/JFrangel/AI-Agents-Skills --skill security-guard-jfrangel

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill proactively identifies and helps fix security vulnerabilities in code, infrastructure, and architecture, preventing breaches and ensuring compliance with security standards before deployment.

Core Features & Use Cases

  • Vulnerability Detection: Scans code for common exploits (SQLi, XSS, etc.) and insecure configurations.
  • Dependency Scanning: Checks for known vulnerabilities in project dependencies.
  • Secrets Detection: Finds hardcoded API keys, tokens, or credentials.
  • Architecture Review: Assesses if the system design adheres to security best practices.
  • Remediation: Provides secure code patches that integrate without breaking functionality.
  • Use Case: Before deploying a new API, run security-guard to audit its endpoints, dependencies, and code for any potential security flaws, receiving actionable fixes.

Quick Start

Run the security guard skill to audit the entire project for vulnerabilities.

Frequently Asked Questions about security-guard

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my code for security vulnerabilities before deployment?▼

You can scan code for security vulnerabilities by auditing the project to detect common exploits like SQL injection and XSS, checking dependencies for known flaws, and identifying hardcoded secrets.

What is secure coding and how does DevSecOps enforce it?▼

Secure coding prevents vulnerabilities in software, and DevSecOps enforces it by integrating vulnerability detection, secrets detection, and security architecture reviews into pre-production environments.

How do I find hardcoded API keys and credentials in my source code?▼

To find hardcoded API keys and credentials in source code, run a secrets detection scan that identifies exposed tokens and provides secure code patches to remediate the risks without breaking functionality.

Does this security audit work for reviewing infrastructure and architecture?▼

This security audit works for infrastructure and architecture by assessing whether system design adheres to OWASP and modern secure coding standards, ensuring compliance across pre-production environments.

What is the best way to remediate insecure code without breaking functionality?▼

The best way to remediate insecure code without breaking functionality is to apply secure code patches generated by the audit, which correct identified risks like SQLi and XSS while preserving existing operations.

Related Skills

Explore More Software Engineering Skills→
JamesPrialJamesPrial
1

github-actions-writer

Generate GitHub Actions workflows with security and performance best practices.

Community
Advanced
MacPhobosMacPhobos

Security Scanning

Automate security scanning of code and dependencies for vulnerabilities.

Community
Intermediate
luokai25luokai25

devsecops-expert

Integrates security scans into CI/CD pipelines automating vulnerability detection.

Community
Advanced
sugarforeversugarforever
131

Next.js Security Scan

Scan Next.js and TypeScript/JavaScript projects for security vulnerabilities.

Community
Advanced