skills.rest
outwebfeng
outwebfengCOMMUNITY
Explore all skills by this author →
GitHub

security-scan

Scan staged Git changes for security vulnerabilities before commit.

4|4|Updated May 20, 2024
Search Tags:#code review#pre-commit#security scan#vulnerability detection#security auditing
One-click install
npx skills add https://github.com/outwebfeng/text-format --skill security-scan-outwebfeng
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/outwebfeng/text-format/tree/main/.claude/skills/security-scan
Command: npx skills add https://github.com/outwebfeng/text-format --skill security-scan-outwebfeng

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill ensures code safety and compliance by performing a comprehensive security audit on pending changes before they are committed to the repository.

Core Features & Use Cases

  • Pre-commit Security Audit: Checks for secrets exposure, injection vulnerabilities, and business logic flaws.
  • Deterministic Script Execution: Automated checks for common security issues in staged changes.
  • Manual Diff Review: Manual review of changes to identify more nuanced vulnerabilities.
  • Use Case: Before every git commit, this Skill helps identify and mitigate security risks that could lead to data breaches or system compromise.

Quick Start

Run the security scan before committing by executing 'python3 .claude/skills/security-scan/scripts/scan_staged.py'.

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a pre-commit security audit on staged changes?▼

A pre-commit security audit on staged changes is executed by running 'python3 .claude/skills/security-scan/scripts/scan_staged.py' to scan for common vulnerabilities in pending Git commits.

What types of security vulnerabilities can a pre-commit scan detect?▼

A pre-commit security scan detects secret exposure, injection attacks, and authorization issues. It performs automated checks for common security flaws and conducts a manual diff review to identify nuanced vulnerabilities in business logic.

Do I need Python to automate vulnerability detection for pending Git commits?▼

Yes, Python is required to automate vulnerability detection for pending Git commits. The Skill uses Python for script execution and Git for change tracking to perform security auditing on staged changes before they are committed.

Does this security scan work for repositories with strict compliance requirements?▼

Yes, this security scan is suitable for repositories with strict compliance requirements. It ensures code safety by performing comprehensive security audits on pending changes before they enter the repository history.

What is the best way to prevent secret exposure before committing code?▼

The best way to prevent secret exposure is to automate a pre-commit security audit using a script that scans staged changes. This identifies and mitigates security risks like leaked secrets before they are committed to the repository.

Related Skills

Explore More Software Engineering Skills→
Fandhe-AIFandhe-AI
1

implement-review

Automate code review via git diff analysis for quality and security.

Official
Intermediate
pcasarettopcasaretto

security-sentinel

Audit code for vulnerabilities, input validation, and OWASP compliance.

Community
Advanced
AndyHsuTWAndyHsuTW

springboot-verification

Automate Spring Boot project verification with builds, tests, static analysis, and security scans.

Community
Advanced
brenordvbrenordv

security

Audit software systems for security vulnerabilities and regulatory compliance.

Community
Advanced