security

Run dependency audits, SAST, and secret detection across multi-language codebases.

10|2|Updated Feb 7, 2026
One-click install
npx skills add https://github.com/rube-de/cc-skills --skill security-rube-de
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security
Source: https://github.com/rube-de/cc-skills/tree/main/plugins/dlc/skills/security
Command: npx skills add https://github.com/rube-de/cc-skills --skill security-rube-de

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Scan an entire project for security vulnerabilities, generate a structured report, and file a GitHub issue to track remediation.

Core Features & Use Cases

  • Dependency audits across Node.js, Python, Rust, Go, Java/Kotlin, and Ruby projects.
  • Static analysis (SAST) and secret detection with prioritized tool selection and robust reporting.
  • Issue generation that formats findings according to a standard template and attaches a detailed metadata block.

Quick Start

Trigger the security scan on your repository to automatically detect dependencies, run SAST and secret checks, and create a GitHub issue with findings.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security vulnerability scanning and create a GitHub issue for findings?

Automated security vulnerability scanning runs dependency audits, SAST, and secret detection across your project, then formats the findings into a structured report and automatically creates a GitHub issue to track remediation.

Does security scanning support multiple programming languages in a monorepo?

Security scanning supports multi-repo and monorepo codebases by automatically detecting language ecosystems including Node.js, Python, Rust, Go, Java/Kotlin, and Ruby to run targeted checks.

How do I run a dependency audit and SAST check on a Python or Node.js project?

Trigger a security scan on your repository to automatically detect Python or Node.js dependencies, run SAST and secret checks in priority order, and generate a structured findings report.

What is the best way to track secret detection findings in a GitHub repository?

The best way to track secret detection findings is generating a GitHub issue with a detailed metadata block and structured findings formatted according to a standard issue template.

Are there limitations when running SAST and dependency audits on multi-repo codebases?

Limitations depend on the detected language ecosystems, as the security scan prioritizes tool selection for dependency audits, SAST, and secret detection specifically for Node.js, Python, Rust, Go, Java/Kotlin, and Ruby environments.