security-scan

Automates security audits combining SAST, MLOps-driven fleet monitoring, and secret detection for GitOps workflows.

Updated Aug 23, 2026

Search Tags:#security #audit #secrets #sast #vulnerabilities #sca

Ready to run

npx skills add https://github.com/EtroxTaran/conductor --skill security-scan-etroxtaran

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/EtroxTaran/conductor/tree/main/.claude/skills/security-scan
Command: npx skills add https://github.com/EtroxTaran/conductor --skill security-scan-etroxtaran

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the critical need to identify and mitigate security vulnerabilities within code, dependencies, and containerized environments, preventing breaches and ensuring compliance.

Core Features & Use Cases

Comprehensive Auditing: Performs Static Application Security Testing (SAST), Software Composition Analysis (SCA), and secret detection.
Vulnerability Management: Identifies and categorizes security flaws with severity levels and remediation guidance.
CI/CD Integration: Provides examples for seamless integration into GitHub Actions and pre-commit hooks.
Use Case: Before deploying a new feature, run this skill to automatically scan for hardcoded secrets, vulnerable libraries, and common code injection flaws, ensuring a secure release.

Quick Start

Run a full security audit on the current project, including dependency, secret, and SAST scans.

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I run a SAST and SCA audit to find vulnerabilities before deploying code?▼

Static Application Security Testing and Software Composition Analysis audits identify vulnerabilities in source code and dependencies. This skill executes multi-layered security scans to detect known exploits, misconfigurations, and provides severity levels with remediation guidance for secure releases.

What is the best way to scan for hardcoded secrets in my source code and container images?▼

Scanning for hardcoded secrets in source code and container images is automated through multi-layered security auditing. This skill analyzes codebases and containerized environments to detect sensitive credentials, vulnerable libraries, and common code injection flaws.

Can I integrate automated security scanning into my GitHub Actions CI/CD pipelines?▼

Integrating automated security scanning into GitHub Actions CI/CD pipelines is fully supported. This skill provides examples for seamless integration into CI/CD pipelines and pre-commit hooks to enforce continuous security assurance throughout the development lifecycle.

How does software composition analysis identify vulnerable dependencies in my project?▼

Software Composition Analysis identifies vulnerable dependencies by analyzing your project's libraries against known exploit databases. This skill categorizes discovered security flaws with severity levels and offers actionable remediation guidance to mitigate risks in your software supply chain.

Do I need a specific environment to run pre-commit hooks for continuous security assurance?▼

Running pre-commit hooks for continuous security assurance requires integrating the skill into your existing development workflow. It provides examples for seamless integration into pre-commit hooks, ensuring scans for hardcoded secrets and vulnerabilities execute automatically before code changes are committed.