skills.rest
DVNghiem
DVNghiemCOMMUNITY
Explore all skills by this author →
GitHub

security-scan

Scan codebases for secrets, injection flaws, weak authentication, and vulnerable dependencies.

20|3|Updated Apr 30, 2026
Search Tags:#security#authentication#dependencies#injection#remediation#secrets#scan
One-click install
npx skills add https://github.com/DVNghiem/FlowDeck --skill security-scan-dvnghiem
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/DVNghiem/FlowDeck/tree/main/src/skills/security-scan
Command: npx skills add https://github.com/DVNghiem/FlowDeck --skill security-scan-dvnghiem

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Pre-commit security scanning that detects secrets, injection risks, authentication gaps, and vulnerable dependencies, delivering a clear PASS/FAIL verdict with remediation guidance.

Core Features & Use Cases

  • Secrets detection: identify hard-coded credentials and keys in the codebase.
  • Injection & auth checks: detect potential SQL/NoSQL/template injections and weak authentication paths.
  • Dependency risk: flag CVEs and outdated packages via npm audit.
  • Use Case: Before merging a PR that touches auth or data access, run this skill to surface critical issues and remediation steps, ensuring safe changes.

Quick Start

Run the security-scan skill on your repository to generate a severity-ranked security report with actionable remediations.

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a pre-commit security scan to detect hard-coded secrets?▼

To run a pre-commit security scan for hard-coded secrets, execute a multi-step check over the repository to identify credentials and keys, producing a standardized PASS/FAIL verdict with actionable remediation guidance.

What does a pre-merge security check cover for injection and authentication flaws?▼

Pre-merge security checks cover injection and authentication by detecting potential SQL, NoSQL, and template injections, identifying weak authentication paths, and flagging vulnerable dependencies via npm audit.

Can I use automated security scanning in CI pipelines to prevent vulnerable dependencies?▼

Yes, you can use automated security scanning in CI pipelines to prevent vulnerable dependencies by running npm audit checks that flag CVEs and outdated packages before production deployment.

What is the best way to identify weak authentication paths in a codebase before deployment?▼

The best way to identify weak authentication paths before deployment is to run an automated security scan that analyzes authentication checks, delivering a severity-ranked report with specific remediation steps.

Does pre-deployment security scanning provide remediation guidance for detected issues?▼

Yes, pre-deployment security scanning provides remediation guidance by generating a standardized PASS/FAIL verdict alongside actionable steps to resolve detected secrets, injection flaws, and dependency vulnerabilities.

Related Skills

Explore More Software Engineering Skills→
cyperx84cyperx84
2

Vulnerability Detection

Scan source code, dependencies, and infrastructure for security vulnerabilities.

Community
Advanced
olaafrossiolaafrossi
10

codex

Run Codex CLI to generate independent code review opinions with pass/fail gates.

Community
Advanced
SKY-lvSKY-lv

security-testing-agent

Scan code, dependencies, and configurations for security vulnerabilities.

Community
Advanced
icartshicartsh
4

code-analyze

Analyze .NET solutions for code quality, security, and dependency issues.

Community
Advanced