skills.rest
takumi12311123
takumi12311123COMMUNITY
Explore all skills by this author →
GitHub

security-scan

Identify and remediate security vulnerabilities in code during codex-review.

1|Updated Aug 10, 2024
Search Tags:#security#vulnerability#owasp#static-analysis#secure-coding#codex-review
One-click install
npx skills add https://github.com/takumi12311123/dotfiles --skill security-scan-takumi12311123
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/takumi12311123/dotfiles/tree/main/.claude/skills/security-scan
Command: npx skills add https://github.com/takumi12311123/dotfiles --skill security-scan-takumi12311123

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Identify and remediate security vulnerabilities in code during codex-review.

Core Features & Use Cases

  • OWASP Top 10 coverage and vulnerability checks across code bases.
  • Automated risk assessment with remediation guidance.
  • Automatic invocation during codex-review for security-sensitive code.

Quick Start

Trigger the security-scan during codex-review to begin automated vulnerability analysis on your codebase.

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify security vulnerabilities in my code during a review?▼

You can identify security vulnerabilities by triggering an automated scan during codex-review. This process analyzes authentication, authorization, data handling, dependencies, and API endpoints to detect common weaknesses and OWASP Top 10 issues across your codebase.

What is the best way to check my codebase for OWASP Top 10 vulnerabilities?▼

The best way to check for OWASP Top 10 vulnerabilities is using automated static analysis during code review. This approach applies pattern identification and risk assessment across your codebase to detect and remediate common security weaknesses.

How do I get remediation guidance for security risks found in my code?▼

To get remediation guidance, run a security vulnerability scan that generates a remediation-focused report. This report provides automated risk assessment and actionable steps to fix identified security issues across your codebase.

Can I automatically scan for security issues in sensitive code without manual triggers?▼

Yes, you can automatically scan for security issues in sensitive code. The vulnerability analysis invokes automatically during codex-review, enforcing checks without requiring manual triggers to identify weaknesses across your codebase.

What types of security weaknesses does a static analysis scan cover?▼

Static analysis scans cover the OWASP Top 10 and common weaknesses across authentication, authorization, data handling, dependencies, and API endpoints. This ensures comprehensive vulnerability detection throughout your codebase.

Related Skills

Explore More Software Engineering Skills→
AidenSbVevoAidenSbVevo
1

semgrep

Run parallelized Semgrep static analysis and merge SARIF results.

Community
Advanced
goffitygoffity

security-auditor

Audit JavaScript, TypeScript, Python, and Go code for OWASP Top 10 risks and hardcoded secrets.

Community
Intermediate
dgkngkdgkngk

security

Audit applications for OWASP Top 10 vulnerabilities and dependency issues.

Community
Intermediate
Serg28Serg28

security-reviewer

Automate security audits with semgrep, trivy, gitleaks, and dependency scanners.

Community
Intermediate