skills.rest
congthang12312
congthang12312COMMUNITY
Explore all skills by this author →
GitHub

security-scanner

Scan codebases for hardcoded secrets and generate SECURITY_GATE.md checklists.

Updated Mar 19, 2026
Search Tags:#automation#checklist#security#vulnerability#secrets#sast#static-analysis
One-click install
npx skills add https://github.com/congthang12312/Sentinel-AI-test --skill security-scanner-congthang12312
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scanner
Source: https://github.com/congthang12312/Sentinel-AI-test/tree/main/.agent/skills/security-scanner
Command: npx skills add https://github.com/congthang12312/Sentinel-AI-test --skill security-scanner-congthang12312

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Quickly identify hardcoded secrets and dangerous functions in a codebase, and generate a standardized Security Release Checklist to gate releases.

Core Features & Use Cases

  • Zero-Token Audit (SAST): Scans the repository for secrets and unsafe patterns using vuln_scan.py.
  • Release Checklist Generator: Generates SECURITY_GATE.md via checklist_gen.py for security gating during releases.
  • Quick remediation guidance: Produces actionable findings to assist developers in remediation.

Quick Start

Run python .agent/skills/security-scanner/scripts/vuln_scan.py . to scan your codebase for secrets and risky patterns, then run python .agent/skills/security-scanner/scripts/checklist_gen.py to generate SECURITY_GATE.md.

Frequently Asked Questions about security-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for hardcoded secrets and risky functions?▼

To scan your codebase for hardcoded secrets and risky functions, execute the vuln_scan.py Python script against your repository directory to identify unsafe patterns and produce actionable findings for remediation.

How do I generate a security release checklist for gating deployments?▼

You generate a security release checklist by running the checklist_gen.py Python script, which produces a ready-to-use SECURITY_GATE.md file to gate releases and ensure codebase security standards are met.

Does zero-token SAST auditing require any external dependencies or API keys?▼

Zero-token SAST auditing requires no external dependencies or API keys, as it operates locally by running the provided Python scripts to scan source code for vulnerabilities and dangerous patterns.

Can I use static analysis to find vulnerabilities across different programming languages?▼

Yes, you can use this static analysis to find vulnerabilities across different programming languages, as it is applicable to web apps, libraries, and services without being limited to a single language environment.

What is the best way to automate security gating for web app releases?▼

The best way to automate security gating for web app releases is to run the vulnerability scanner and checklist generator scripts sequentially, producing a standardized SECURITY_GATE.md document for your deployment pipeline.

Do I need Python to run the vulnerability scanner and checklist generator?▼

Yes, you need Python installed to run the vulnerability scanner and checklist generator, as both the vuln_scan.py and checklist_gen.py scripts rely on the Python runtime to execute and output results.

Related Skills

Explore More Software Engineering Skills→
4shil4shil
1

understand

Analyze source code to generate an interactive knowledge graph in JSON.

Community
Advanced
agulliagulli
482

deploy-checklist

Enforce deployment guardrails and standardized checklists in CI/CD pipelines.

Community
Advanced
gvkhoslagvkhosla
49

lint

Lint Ruby and ERB files with StandardRB, ERBLint, and Brakeman.

Community
Intermediate
JosiahSiegelJosiahSiegel
51

defender-for-devops

Integrate Microsoft Defender for DevOps into Azure Pipelines for automated security scanning.

Community
Advanced