skills.rest
pwarnock
pwarnockCOMMUNITY
Explore all skills by this author →
Website𝕏@pwarnockGitHub

security-scanning

Automates security scanning for vulnerabilities, secrets, and misconfigurations in projects.

2|Updated Oct 24, 2025
Search Tags:#security#vulnerability#dependencies#audit#compliance#secrets#static-analysis
One-click install
npx skills add https://github.com/pwarnock/liaison-toolkit --skill security-scanning-pwarnock
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scanning
Source: https://github.com/pwarnock/liaison-toolkit/tree/main/.skills/security-scanning
Command: npx skills add https://github.com/pwarnock/liaison-toolkit --skill security-scanning-pwarnock

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill automates comprehensive security checks to identify vulnerabilities, secrets, and misconfigurations across codebases.

Core Features & Use Cases

  • Dependency auditing with Bun and npm, plus Snyk integration for consolidated risk reporting
  • Secret detection via pre-commit hooks and gated checks to prevent credential leakage
  • Static code analysis and security linting to enforce secure coding practices
  • Vulnerability management and pre-deployment gates to block unsafe releases

Quick Start

bun audit npm audit snyk test Enable pre-commit secrets scanning and CI-based security gates.

Frequently Asked Questions about security-scanning

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security audit and vulnerability scan for a Node.js project?▼

To run a security audit for Node.js, execute dependency checks using bun audit or npm audit, integrate Snyk test for consolidated risk reporting, and enable static analysis to identify vulnerabilities and misconfigurations.

Can I set up pre-commit hooks for secret detection in my CI pipeline?▼

Yes, you can enforce secret detection in CI pipelines by enabling pre-commit hooks and gated checks, which scan code changes to prevent credential leakage before commits are finalized or deployments proceed.

What is the best way to block unsafe releases with pre-deployment security gates?▼

The best way to block unsafe releases is by implementing pre-deployment security gates that combine static code analysis, dependency auditing, and vulnerability management to halt deployments when critical flaws are detected.

Does Snyk integration work with bun audit for vulnerability management?▼

Snyk integration works alongside bun audit by providing consolidated risk reporting, allowing you to execute dependency audits and manage vulnerabilities across your TypeScript and Node.js software projects.

How do I enforce secure coding practices with static analysis and security linting?▼

You enforce secure coding practices by configuring static code analysis and security linting within your code review process, automatically identifying misconfigurations and vulnerabilities before code is merged.

Related Skills

Explore More Software Engineering Skills→
markjoshwelmarkjoshwel

js-bun-majo

Automate Bun as the runtime, tooling, and package manager for JavaScript/TypeScript projects.

Community
Intermediate
alex-tgkalex-tgk

senior-secops

Automate vulnerability discovery and compliance checks across codebases, containers, and pipelines.

Community
Intermediate
darelabs-techdarelabs-tech

dare-security

Integrate security validation gates into the DARE development lifecycle.

Official
Advanced
dandudzidandudzi
2

sast-configuration

Automate SAST tool selection, configuration, and CI/CD integration.

Community
Advanced