Scan code repositories for security vulnerabilities and generate remediation reports.
npx skills add https://github.com/LayerDynamics/Lore --skill security-layerdynamics
Please help me install this Agent Skill. Skill: security Source: https://github.com/LayerDynamics/Lore/tree/main/lore/skills/security Command: npx skills add https://github.com/LayerDynamics/Lore --skill security-layerdynamics
This Skill proactively identifies and helps remediate security vulnerabilities within your codebase, protecting your project from common threats like exposed secrets, injection attacks, and insecure configurations.
Run a security scan on the current project directory.
High-intent search queries and answers about installing and using this skill.
To scan for security vulnerabilities and hardcoded secrets, run a security scan on your project directory. It uses grep pattern matching across file types to detect exposed secrets, OWASP patterns like SQLi, and insecure configurations, generating a detailed vulnerability report.
Automated remediation for OWASP vulnerabilities guides you through fixing identified issues by severity. After scanning detects injection attacks or insecure configurations, it prioritizes critical findings and provides step-by-step instructions to remediate high, medium, and low severity vulnerabilities.
Yes, you can detect insecure configurations and exposed API keys before production by running a security scan. It proactively identifies accidentally committed secrets and common threats like injection attacks, providing a detailed report to fix issues prior to deployment.
Yes, the security scanner works without external dependencies. It relies on grep for pattern matching across various file types to identify hardcoded secrets and OWASP vulnerability patterns, requiring no additional language-specific linters or complex environment setup.
Vulnerability findings are prioritized by severity level. The scan evaluates the codebase for security issues and categorizes them into critical, high, medium, and low severity findings, guiding you through fixing the most critical vulnerabilities first during automated remediation.
alexanderopCreate isolated git worktrees for feature branches with safety checks.
aakash-dharAudit code for injection attacks, exposed secrets, and authentication flaws.
elizaOSRun CodeQL and Semgrep scans and parse SARIF results.
kivo360Mitigate security vulnerabilities in CI/CD pipelines using OWASP Top 10 and SAST/DAST workflows.
