skills.rest
efiadm
efiadmCOMMUNITY
Explore all skills by this author →
GitHub

security-scanning-hooks

Configure automated security scanning hooks with semgrep, bandit, and gitleaks.

Updated Feb 20, 2026
Search Tags:#security#vulnerability#secrets#scanning#bandit#semgrep#gitleaks
One-click install
npx skills add https://github.com/efiadm/informatik-ai-studio --skill security-scanning-hooks
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scanning-hooks
Source: https://github.com/efiadm/informatik-ai-studio/tree/main/.claude/skills/security-scanning-hooks
Command: npx skills add https://github.com/efiadm/informatik-ai-studio --skill security-scanning-hooks

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill automates the detection of security vulnerabilities and sensitive information (secrets) within your codebase, helping to prevent security breaches and data leaks before they occur.

Core Features & Use Cases

  • Vulnerability Detection: Utilizes tools like Semgrep and Bandit to identify common security flaws and coding errors.
  • Secrets Scanning: Employs Gitleaks and custom regex patterns to find hardcoded API keys, passwords, and other credentials.
  • Use Case: As you write code, this Skill automatically scans modified files for potential security issues and exposed secrets, providing immediate feedback to fix them.

Quick Start

Set up automated security scanning for your project.

Frequently Asked Questions about security-scanning-hooks

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I set up automated security scanning for code changes?▼

Automated security scanning uses hooks to analyze modified files in real time. This Skill configures Semgrep, Bandit, and Gitleaks to detect OWASP vulnerabilities, Python-specific issues, and hardcoded secrets as you write code.

What is the best way to scan my codebase for hardcoded secrets and API keys?▼

Scanning for hardcoded secrets is done using Gitleaks and custom regex patterns. This approach identifies exposed credentials and passwords in your codebase to prevent data leaks before they occur.

Can I use Bandit and Semgrep together for vulnerability detection?▼

Bandit and Semgrep can be used together for vulnerability detection. Semgrep identifies common security flaws, while Bandit targets Python-specific coding errors, integrating with Claude Code for real-time feedback.

Does automated vulnerability scanning work with Python code?▼

Automated vulnerability scanning supports Python code through Bandit. It identifies Python-specific security issues and OWASP vulnerabilities during code changes, providing immediate feedback to fix coding errors.

Related Skills

Explore More Software Engineering Skills→
peterfeipeterfei
420

changelog-generator

Generate CHANGELOG.md from Git commit history using Conventional Commits.

Community
Intermediate
armanzeroeightarmanzeroeight
29

secrets-detector

Detect hardcoded secrets and API keys in source code repositories.

Community
Intermediate
kobogithubkobogithub

security-semgrep

Run Semgrep SAST scans to detect security vulnerabilities in code.

Community
Advanced
JosiahSiegelJosiahSiegel
51

defender-for-devops

Integrate Microsoft Defender for DevOps into Azure Pipelines for automated security scanning.

Community
Advanced