skills.rest
mohitmishra786
mohitmishra786COMMUNITY
Explore all skills by this author →
Website𝕏@chessMan786GitHub

security

Scan code, dependencies, containers, and cloud configurations for security vulnerabilities.

Updated Feb 7, 2026
Search Tags:#code quality#security#vulnerability#audit#compliance#secrets detection#dependency scanning
One-click install
npx skills add https://github.com/mohitmishra786/aurora-dev --skill security-mohitmishra786
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security
Source: https://github.com/mohitmishra786/aurora-dev/tree/main/.agents/skills/security
Command: npx skills add https://github.com/mohitmishra786/aurora-dev --skill security-mohitmishra786

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the critical need to identify and mitigate security vulnerabilities within codebases, dependencies, and infrastructure, ensuring robust protection against threats.

Core Features & Use Cases

  • Vulnerability Scanning: Detects security flaws using SAST and DAST tools, checks against OWASP Top 10.
  • Dependency Auditing: Scans for known vulnerabilities in project dependencies (npm, pip) and monitors for CVEs.
  • Secret Detection: Identifies hardcoded secrets and API keys in code and commit history.
  • Container Security: Scans Docker images for vulnerabilities and misconfigurations.
  • Compliance Checks: Assesses adherence to standards like GDPR, SOC2, and PCI DSS.
  • Use Case: Before deploying a new feature, run a comprehensive security audit to identify and fix any critical vulnerabilities, ensuring compliance and protecting user data.

Quick Start

Use the security skill to perform a full security audit on the current project.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my code for vulnerabilities and hardcoded secrets?▼

To scan code for vulnerabilities and hardcoded secrets, you conduct a comprehensive security audit utilizing SAST and DAST tools. This process detects security flaws, identifies hardcoded API keys, and checks against the OWASP Top 10 to ensure robust protection.

What is the best way to audit npm and pip dependencies for known CVEs?▼

The best way to audit npm and pip dependencies for known CVEs is through automated dependency auditing. This scans your project dependencies to identify known vulnerabilities, monitors for Common Vulnerabilities and Exposures, and helps mitigate risks before deployment.

Can I check my Docker containers for security misconfigurations?▼

Yes, you can check Docker containers for security misconfigurations using container security scanning. This functionality scans Docker images to detect vulnerabilities and misconfigurations, ensuring your containerized infrastructure remains secure against potential threats.

Does this security audit cover compliance standards like GDPR and SOC2?▼

Yes, this security audit covers compliance standards like GDPR, SOC2, and PCI DSS. The compliance checks assess your codebase and infrastructure adherence to these regulatory standards, ensuring your project meets necessary data protection and security requirements.

How do I run a full security audit before deploying a new feature?▼

To run a full security audit before deploying a new feature, execute a comprehensive security review on your current project. This scans code, dependencies, and cloud configurations to identify and fix critical vulnerabilities, ensuring compliance and protecting user data.

Related Skills

Explore More Software Engineering Skills→
ntaksh42ntaksh42
1

dependency-analyzer

Analyze project dependencies for security vulnerabilities, updates, and license compatibility.

Community
Intermediate
williamzujkowskiwilliamzujkowski
17

nosql

Mitigate security vulnerabilities from insecure NoSQL patterns in database environments.

Community
Intermediate
luokai25luokai25

devsecops-expert

Integrates security scans into CI/CD pipelines automating vulnerability detection.

Community
Advanced
kivo360kivo360
1

moai-domain-security

Mitigate security vulnerabilities in CI/CD pipelines using OWASP Top 10 and SAST/DAST workflows.

Community
Advanced