Audit code for security vulnerabilities, hardcoded secrets, and dependency risks.
npx skills add https://github.com/ps-carvalho/spavn-agents --skill security-ps-carvalho
Please help me install this Agent Skill. Skill: security Source: https://github.com/ps-carvalho/spavn-agents/tree/main/.opencode/skills/security Command: npx skills add https://github.com/ps-carvalho/spavn-agents --skill security-ps-carvalho
This Skill identifies security vulnerabilities and hardcoded secrets within your codebase, ensuring a more secure development process.
Use the security skill to audit the attached files for vulnerabilities and secrets.
High-intent search queries and answers about installing and using this skill.
To audit code for vulnerabilities and secrets, run this Skill in a secure environment with access to your project files. It automatically scans against the OWASP Top 10, flags hardcoded API keys or tokens, and checks dependencies for known risks.
The best way to check project dependencies for known vulnerabilities is to run an automated dependency scanning audit. This Skill evaluates your project files to identify risky dependencies and hardcoded credentials before merging new features.
You can detect hardcoded API keys and passwords in your codebase by running a secret detection audit. This Skill scans project files to flag exposed tokens and credentials, preventing accidental exposure of sensitive information during development.
Yes, this vulnerability audit covers OWASP Top 10 risks, input validation, authentication, and modern attack vectors. It scans your codebase thoroughly to identify these critical security flaws and ensure a secure development process.
You need a secure environment with direct access to your project files to run this security audit. This setup allows the scanner to accurately evaluate code for vulnerabilities, secrets, and dependency risks without external limitations.
You should run a code vulnerability audit before merging a new feature into your codebase. Performing this scan ensures that security vulnerabilities, hardcoded secrets, and dependency risks are detected and resolved early in development.
stephanjConducts security audits and vulnerability assessments on codebases and infrastructure.
GaryOcean428Detect secrets, insecure dependencies, and vulnerable patterns in codebases.
piers-sinclairAudit Bicep files for naming conventions and Azure best-practice compliance.
matteocervelliScan codebases for secrets, vulnerable dependencies, and insecure patterns.
