security

Scan dependencies, detect secrets, and audit permissions for OWASP compliance.

Updated Feb 22, 2026
One-click install
npx skills add https://github.com/phoenixvc/agentkit-forge --skill security-phoenixvc
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security
Source: https://github.com/phoenixvc/agentkit-forge/tree/main/.agents/skills/security
Command: npx skills add https://github.com/phoenixvc/agentkit-forge --skill security-phoenixvc

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the critical need for robust security analysis by automating the detection of vulnerabilities, secrets, and compliance issues within a codebase.

Core Features & Use Cases

  • Vulnerability Scanning: Identifies known security flaws in project dependencies.
  • Secret Detection: Locates hardcoded credentials and sensitive information.
  • Compliance Checks: Assesses adherence to security standards like OWASP Top 10.
  • Use Case: Before deploying new code, run this skill to ensure no critical vulnerabilities or exposed secrets are present, preventing potential breaches.

Quick Start

Run the security skill to perform a full security audit of the current project.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan code for hardcoded secrets before deployment?

Secret detection scans your codebase to locate hardcoded credentials and sensitive information, preventing potential breaches before new code is deployed.

What is OWASP compliance checking for software projects?

OWASP compliance checking assesses your codebase against security standards like the OWASP Top 10 to identify risks such as broken access control, injection flaws, and authentication failures.

How do I audit project dependencies for known vulnerabilities?

Vulnerability scanning identifies known security flaws in project dependencies and generates a detailed report with severity ratings and remediation guidance.

Can I check for permission and access control flaws in my codebase?

Permission auditing analyzes your codebase to detect broken access control and authentication failures, providing remediation guidance to secure systems.

What is the best way to find insecure design and misconfiguration risks?

Comprehensive security analysis detects insecure design and misconfigurations, generating a detailed report with severity ratings to guide remediation.

Do I need to configure external tools to perform a full security audit?

No, running the security skill performs a full audit of the current project internally, checking dependencies, secrets, and compliance without external dependencies.