Audit API boundaries, secret handling, env safety, and dependencies.
npx skills add https://github.com/lagarcess/argus --skill security-review-lagarcess
Please help me install this Agent Skill. Skill: Security Review Source: https://github.com/lagarcess/argus/tree/main/.agent/skills/security-review Command: npx skills add https://github.com/lagarcess/argus --skill security-review-lagarcess
Security risks at API boundaries, secret handling, and environment management create exposure that can lead to data theft, service disruption, and compliance gaps. This Skill provides a structured checklist and guidelines to enforce secure defaults across code, configuration, and deployments.
Run a security review to validate API boundaries, secret handling, env safety, and dependency auditing.
High-intent search queries and answers about installing and using this skill.
To check for secret leakage in git history and env files, audit your repository for hardcoded credentials and ensure env files are properly gitignored. This security review validates that env example files contain placeholders only and no secrets exist in pyproject.toml or CI configs.
The best way to manage secrets in Python backend services is using pydantic-settings to load environment variables and validate them on startup. This approach avoids reading os.environ directly and ensures secrets remain in gitignored env files rather than source code.
To audit Python dependencies for security vulnerabilities, run pip-audit periodically and pin major versions in your configuration. This security review process includes reviewing dependency changelogs before upgrades to maintain secure CI pipelines and backend services.
Security flags to look for during a code review include hardcoded secrets, SQL or NoSQL injection vectors, unvalidated input, overly permissive CORS, and logging of sensitive data. This review also checks for safe retrieval of external assets and HTML sanitization.
To secure API boundaries and gatekeeping in backend services, validate inputs with models, apply rate limits, use CORS allowlists, and return generic errors to clients. This approach aligns with operational security checks across backend services and CI pipelines.
Yes, this security review works with existing CI pipelines and pyproject.toml configurations by auditing them for hardcoded secrets and dependency vulnerabilities. It ensures env files are gitignored and validates startup secrets using pydantic-settings across your backend services.
Renzo-TognellaSet up a Python 3.11+ project with pyproject.toml and uv.
luongldptitScans Claude Code configs for vulnerabilities and outputs severity-graded reports.
riftzen-bitIdentify and remediate security misconfigurations in Java Spring Boot services.
firstsun-devConfigure GitHub secret scanning with push protection and custom patterns.
