skills.rest
gaebalai
gaebalaiCOMMUNITY
Explore all skills by this author →
Website𝕏@gaebalaiGitHub

security-quick

Scan codebases for OWASP Top 10 vulnerabilities and generate a categorized report.

2|Updated Feb 25, 2026
Search Tags:#OWASP#security#vulnerability#injection#secrets#code scan
One-click install
npx skills add https://github.com/gaebalai/claude-code-kit-ko --skill security-quick
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-quick
Source: https://github.com/gaebalai/claude-code-kit-ko/tree/main/.claude/skills/security-quick
Command: npx skills add https://github.com/gaebalai/claude-code-kit-ko --skill security-quick

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill helps developers quickly identify common security vulnerabilities in their codebase, focusing on OWASP Top 10 risks, to prevent potential breaches and improve overall security posture.

Core Features & Use Cases

  • Automated Vulnerability Scanning: Performs a rapid, automated check for common security flaws.
  • OWASP Top 10 Focus: Specifically targets high-risk areas like SQL injection, XSS, and secrets exposure.
  • Use Case: Before committing code, run this Skill to catch hardcoded API keys or potential SQL injection vulnerabilities, saving you from costly security incidents.

Quick Start

Run a quick security scan on the 'src/' directory.

Frequently Asked Questions about security-quick

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my code for OWASP Top 10 vulnerabilities like SQL injection and XSS?▼

To scan for OWASP Top 10 vulnerabilities including SQL injection and XSS, run an automated security scan on your codebase. This checks for high-risk flaws and generates a categorized report with recommended actions.

What is the best way to detect hardcoded secrets and API keys in my source code?▼

The best way to detect hardcoded secrets and API keys is to run a quick security scan focusing on OWASP risks, which identifies exposed secrets and helps prevent potential security breaches before committing code.

Can I check my project for command injection risks and outdated dependencies automatically?▼

Yes, you can check for command injection risks and outdated dependencies automatically by running a vulnerability scan that targets these specific OWASP security flaws within your codebase.

Does a basic security scan generate actionable recommendations for fixing found vulnerabilities?▼

Yes, a basic security scan generates actionable recommendations. After identifying vulnerabilities like hardcoded secrets and injection risks, it produces a categorized report detailing recommended actions to improve your security posture.

When should I run a code security scan in my development workflow?▼

You should run a code security scan before committing code. This allows you to catch hardcoded API keys or potential SQL injection vulnerabilities early, saving you from costly security incidents downstream.

Related Skills

Explore More Software Engineering Skills→
juniorfontenelejuniorfontenele

stack-go

Enforce idiomatic Go patterns, quality gates, and testing guidelines for Go projects.

Community
Intermediate
GaryOcean428GaryOcean428

security-audit

Detect secrets, insecure dependencies, and vulnerable patterns in codebases.

Community
Advanced
n-marusovn-marusov

aif-security-checklist

Automates security audits for vulnerabilities in the OWASP Top 10 via bash and npm scanning.

Community
Advanced
manuelbrandner85manuelbrandner85

codeql

Scan software projects for security vulnerabilities using CodeQL data flow analysis.

Community
Advanced