skills.rest
khairulariffinka
khairulariffinkaCOMMUNITY
Explore all skills by this author →
GitHub

security

Scan codebases for OWASP Top 10 vulnerabilities, secrets, and misconfigurations.

1|Updated Apr 12, 2026
Search Tags:#security#vulnerability#owasp#compliance#reporting#secrets-detection#scanner
One-click install
npx skills add https://github.com/khairulariffinka/codexen --skill security-khairulariffinka
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security
Source: https://github.com/khairulariffinka/codexen/tree/main/core/skills/security
Command: npx skills add https://github.com/khairulariffinka/codexen --skill security-khairulariffinka

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security teams spend significant time identifying and remediating vulnerabilities across codebases, dependencies, and configurations. This skill provides automated vulnerability scanning and structured reports to accelerate secure software delivery.

Core Features & Use Cases

  • OWASP Top 10 checks covering injections, authentication, data exposure, misconfigurations, and more.
  • Secrets and sensitive data detection with actionable remediation guidance.
  • Detailed security reports suitable for developers, SREs, and security teams, with prioritized fixes.

Quick Start

Run a baseline security scan on the repository to surface OWASP risks and secret leakage.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for OWASP Top 10 vulnerabilities and exposed secrets?▼

You can scan for OWASP Top 10 vulnerabilities and exposed secrets by running an automated vulnerability scanner that applies pattern-based checks across your codebase. It identifies security risks like injections, misconfigurations, and sensitive data leakage.

What is the best way to automate security reporting for pre-release audits?▼

Automating security reporting for pre-release audits involves using a scanner that generates detailed reports with prioritized remediation guidance. This provides structured outputs covering framework-specific verifications suitable for developers and security teams.

Can I run automated vulnerability checks across web, API, and microservice architectures?▼

Yes, automated vulnerability checks can be applied across web, API, and microservice architectures. The scanner performs configurable checks and pattern-based scans to identify security risks within these distributed environments.

How does secrets detection work during ongoing security reviews?▼

Secrets detection during ongoing security reviews works by scanning codebases for sensitive data patterns. It identifies leaked credentials and provides actionable remediation guidance to fix the exposure within structured security reports.

Does automated security scanning provide remediation guidance for detected misconfigurations?▼

Yes, automated security scanning provides detailed remediation guidance for detected misconfigurations and vulnerabilities. The generated reports prioritize fixes, helping developers and SREs address security risks efficiently.

Related Skills

Explore More Software Engineering Skills→
Q16GQ16G
83

cors-misconfiguration

Analyze CORS response headers to identify misconfigurations in web APIs.

Community
Intermediate
haomingzhaomingz
12

compliance-review-planner

Convert business scenarios into regulatory compliance checklists with risk ratings and remediation steps.

Community
Advanced
cmaennercmaenner
5

code-review-security

Scan codebases for security vulnerabilities and dependency risks.

Community
Intermediate
matteocervellimatteocervelli
25

security-scanner

Scan codebases for secrets, vulnerable dependencies, and insecure patterns.

Community
Advanced