Automate security auditing for codebases and dependencies in CI pipelines.
npx skills add https://github.com/motormetrics/motormetrics --skill security-motormetrics
Please help me install this Agent Skill. Skill: security Source: https://github.com/motormetrics/motormetrics/tree/main/.claude/skills/security Command: npx skills add https://github.com/motormetrics/motormetrics --skill security-motormetrics
This skill provides structured guidance for auditing code for security vulnerabilities, validating dependencies, and enforcing best practices to reduce risk before deployment.
Run pnpm audit for dependency vulnerabilities and address high-severity issues using the guidance in the OWASP checklist.
High-intent search queries and answers about installing and using this skill.
Run pnpm audit to detect dependency vulnerabilities and filter for high or critical severity issues, then remediate vulnerable transitive dependencies using overrides or patching based on the provided guidance.
Check for OWASP Top 10 vulnerabilities by applying structured security audits that evaluate authentication, input validation, CORS, and secure headers, providing specific code examples to enforce common security controls.
Fix vulnerable transitive dependencies identified by Snyk by applying overrides or patching the affected packages, restricting your audit focus to high and critical severity issues to prioritize remediation efforts.
You can enforce security audits on pushes and pull requests by integrating the auditing workflow into your CI pipelines, ensuring that dependency scans and vulnerability checks run automatically before code merges.
Validate environment configurations and secure headers by following the provided hardening guidance for CORS and HTTP headers, which includes specific code examples to apply common security controls and reduce attack surface.
ArogyaReddyConfigure Semgrep, SonarQube, and CodeQL for multi-language CI/CD security scanning.
MinhmiceAudits code and pull requests to identify vulnerabilities and security risks.
kivo360Mitigate security vulnerabilities in CI/CD pipelines using OWASP Top 10 and SAST/DAST workflows.
BagelHoleScan project dependencies for known vulnerabilities using Snyk, Dependabot, and OWASP Dependency-Check.
