security-review

Run pre-commit security audits detecting secrets, validating inputs, and scanning dependencies.

Updated Apr 6, 2026
One-click install
npx skills add https://github.com/a2mus/ecc-antigravity --skill security-review-a2mus
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/a2mus/ecc-antigravity/tree/main/skills/security-review
Command: npx skills add https://github.com/a2mus/ecc-antigravity --skill security-review-a2mus

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security audit checklist and workflow to enforce secrets detection, input validation, OWASP Top 10 controls, and dependency scanning before commits, PRs, or deployments.

Core Features & Use Cases

  • Secrets detection and remediation guidance to prevent credentials from being committed.
  • Input validation guidance, secure data handling, and error handling patterns across the codebase.
  • OWASP Top 10 coverage and dependency scanning to identify vulnerabilities early in the development lifecycle.
  • Use Case: A team runs the pre-commit security review before pushing changes to ensure code quality and security standards are met.

Quick Start

Run the pre-commit security review workflow to surface and remediate high-risk items before merging.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a pre-commit security audit to prevent secrets leakage?

Run a pre-commit security audit to detect secrets, validate inputs, and scan dependencies before commits or deployments. This enforces security hygiene by surfacing high-risk items and providing remediation steps before code merges.

What is the best way to align code changes with OWASP Top 10 controls before merging?

Aligning code changes with OWASP Top 10 controls involves running a structured pre-commit security review. This workflow checks for vulnerabilities early in the development lifecycle, ensuring secure data handling and error handling patterns across the codebase.

How do I scan dependencies for vulnerabilities in a DevOps workflow?

Scan dependencies for vulnerabilities by integrating a pre-commit security audit into your DevOps workflow. This process identifies vulnerable dependencies early and provides remediation guidance before pushing changes to production.

Can I use a pre-commit security review for input validation and secure data handling?

Yes, a pre-commit security review can validate inputs and enforce secure data handling. It applies structured checks across the codebase to ensure error handling patterns meet security standards before commits or pull requests.

Does pre-commit security scanning work without additional dependencies?

Yes, this pre-commit security scanning operates without requiring additional dependencies. It implements a structured set of checks covering secrets detection, input validation, OWASP Top 10 controls, and dependency scanning natively.

Why should I run a security audit before deployments instead of after?

Running a security audit before deployments prevents secrets leakage and identifies vulnerabilities early in the development lifecycle. Enforcing security hygiene pre-commit ensures code quality standards are met before changes reach production.