security-guardian

Audit code, artifacts, and configurations for security vulnerabilities with remediation steps.

1|Updated Apr 9, 2026

Search Tags:#security #vulnerability #audit #compliance #risk-assessment #code-review #secrets-management

Ready to run

npx skills add https://github.com/rohit-vc26/claude-power-kit --skill security-guardian-rohit-vc26

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-guardian
Source: https://github.com/rohit-vc26/claude-power-kit/tree/main/skills/security-guardian
Command: npx skills add https://github.com/rohit-vc26/claude-power-kit --skill security-guardian-rohit-vc26

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Act as a security and firewall administrator to audit every piece of code, skill, artifact, and configuration that passes through this workspace — catching vulnerabilities BEFORE they reach production or get stored anywhere.

Core Features & Use Cases

Audit new or updated skills (SKILL.md) and generated code for secrets, misconfigurations, and insecure patterns.
Validate cross-skill references for consistency and enforce zero-trust defaults.
Provide structured security reports with remediation steps and do not auto-fix.

Quick Start

Run a security audit on the latest code or artifact you are about to deploy.

Frequently Asked Questions about security-guardian

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit generated code for security vulnerabilities and secrets?▼

To audit generated code for security vulnerabilities and secrets, you need an automated scanning mechanism that identifies insecure patterns, misconfigurations, and exposed credentials. This system provides structured findings with clear remediation steps without auto-fixing, requiring user approval for changes.

What does a zero-trust security review of cross-skill references involve?▼

A zero-trust security review of cross-skill references involves validating consistency and enforcing strict access defaults across all workspace artifacts. It checks new or updated configurations and code to ensure no insecure patterns pass through the workspace without explicit approval.

How do I check for exposed environment variables before deploying code?▼

To check for exposed environment variables before deploying code, scan the deployment artifacts and configuration files for secrets. The audit identifies potential insecure patterns and misconfigurations, providing structured findings with remediation steps rather than auto-fixing the issues.

Can I use this security audit to automatically fix insecure patterns in my workspace?▼

No, you cannot use this security audit to automatically fix insecure patterns. It identifies and reports vulnerabilities across code, artifacts, and configurations, providing structured findings with remediation steps, but requires explicit user approval for any changes.

When do I need a security audit for workspace artifacts and configurations?▼

You need a security audit for workspace artifacts and configurations whenever new code, updated skills, or environment variables are introduced. This catches vulnerabilities and misconfigurations before they reach production or get stored anywhere in the workspace.