security-scan

Scan recently changed code for OWASP-aligned security vulnerabilities before merge or deployment.

1|Updated Jan 27, 2026

Search Tags:#security #owasp #audit #pre-commit #vulnerabilities #code-review #changed-files

Ready to run

npx skills add https://github.com/Joaovsales/coding-agent-workflow --skill security-scan-joaovsales

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/Joaovsales/coding-agent-workflow/tree/main/.agents/skills/security-scan
Command: npx skills add https://github.com/Joaovsales/coding-agent-workflow --skill security-scan-joaovsales

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

OWASP-focused security audit on recently changed files to catch vulnerabilities before merge or deployment.

Core Features & Use Cases

Focused scans on changed files only to speed up reviews
OWASP-aligned checklists for common vulnerabilities
Use case: run before committing or deploying to ensure critical issues are addressed

Quick Start

Run the security-scan tool on your current changes to identify and mitigate vulnerabilities before committing.

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan changed code for security vulnerabilities before a merge?▼

To scan changed code for security vulnerabilities before a merge, run a security audit focused on modified files. This process applies OWASP-aligned checks to recently changed code, identifying input validation and authentication issues before deployment.

Can I run an OWASP security audit on only the files modified in a pull request?▼

Yes, you can run an OWASP security audit on only the modified files in a pull request. The scan focuses exclusively on recently changed files rather than the full repository, speeding up the review process during commits and pre-deploy checks.

What security checks should I run before deploying changed code to production?▼

Before deploying changed code, you should run OWASP-aligned security checks that enforce secure coding practices. This scan identifies vulnerabilities in modified files, ensuring proper input validation and authentication controls are addressed before go-live.

Does this security scan work on a full repository or just changed files?▼

This security scan works exclusively on changed files rather than a full repository. By targeting only recently modified code during pull requests or commits, it provides faster vulnerability detection for pre-deploy checks.

When do I need to run a pre-commit security scan on my code changes?▼

You need to run a pre-commit security scan when you want to catch vulnerabilities in modified code before merging or deployment. It is designed for use during pull requests, commits, and pre-deploy checks to ensure critical security issues are addressed early.