Identify security risks in code, dependencies, and configurations.
npx skills add https://github.com/avav25/ai-assets --skill security-scan-avav25
Please help me install this Agent Skill. Skill: security-scan Source: https://github.com/avav25/ai-assets/tree/main/.windsurf/skills/security-scan Command: npx skills add https://github.com/avav25/ai-assets --skill security-scan-avav25
Security and risk exposure across code, dependencies, and configurations can cause production incidents and data leaks if left undetected. This Skill helps teams perform a structured review to surface weaknesses early.
Run the security scan on the affected service to identify and report dependencies, secrets exposure, and configuration risks.
High-intent search queries and answers about installing and using this skill.
To check for secrets exposure and configuration risks, run a security scan on the affected service to identify and report dependencies, exposed secrets, and unsafe defaults. It surfaces weaknesses across codebases and deployments early to prevent data leaks.
The best way to assess dependency and supply-chain risk is performing a structured security review. This process evaluates your project dependencies against common security standards to identify vulnerabilities and generate actionable remediation guidance.
Yes, the security scan provides actionable remediation steps for unsafe defaults and weak validation. It generates guidance aligned with common security best practices to help teams fix identified configuration risks and code weaknesses.
Yes, you can identify security risks during build and release workflows. The scan applies to software projects and deployment environments, enabling risk assessment across development, build, and release stages to prevent production incidents.
Secret detection works by scanning code and configurations across your deployment environments to locate exposed credentials. It identifies secrets exposure during the risk assessment and provides specific remediation guidance to secure them.
BasharAmsoAudit code and dependencies for security vulnerabilities and generate a severity-rated report.
skeletorfletAnalyze dependencies, secrets, and code patterns to generate prioritized vulnerability reports.
riftzen-bitIdentify and remediate security misconfigurations in Java Spring Boot services.
matteocervelliScan codebases for secrets, vulnerable dependencies, and insecure patterns.
