Audit codebases for XSS, injection, and unsafe data flows.
npx skills add https://github.com/SuperCorks/agent-skills --skill security-guidance
Please help me install this Agent Skill. Skill: security-guidance Source: https://github.com/SuperCorks/agent-skills/tree/main/security-guidance Command: npx skills add https://github.com/SuperCorks/agent-skills --skill security-guidance
## What problem does it solve? This skill helps developers identify and remediate common client- and server-side security vulnerabilities in codebases.
## Core Features & Use Cases
### Quick Start Ask the AI to run a security vulnerability audit on the repository and generate a prioritized report detailing detected issues and mitigations.
High-intent search queries and answers about installing and using this skill.
To identify security vulnerabilities like XSS and injection, use a checklist-driven audit to spot unsafe data flows and misconfigurations across web apps and APIs. This provides structured guidance to reduce risk and improve compliance during code reviews.
The best way to run a security audit on a web API is to apply a structured, repeatable process that checks for unsafe data flows and misconfigurations. This generates a prioritized report detailing detected issues and mitigations.
Yes, you can integrate security risk assessment checks into a CI pipeline to implement a reproducible audit workflow. This applies policy-driven checks during standard static analysis to catch unsafe data flows and misconfigurations automatically.
No, you do not need external security tools to detect unsafe data flows beyond standard static analysis and policy-driven checks. The guidance helps you spot risky patterns across web apps and APIs using these existing analysis capabilities.
You should perform a code review security assessment for your web app when you need to reduce risk and improve compliance before production deployment. It identifies common client- and server-side vulnerabilities like XSS and injection.
nanorepublicaValidate code against centralized global tech stack standards.
curiositechScan codebases for dependency CVEs, exposed secrets, and OWASP Top 10 issues.
lionbenjaminOrchestrate automated production deployment workflows with safety checks and rollback readiness.
AnsteorraPerform static and dynamic security audits on the KMP application.
