security-scanning

Automates security scanning for vulnerabilities, secrets, and misconfigurations in projects.

2|Updated Oct 24, 2025

Search Tags:#security #vulnerability #dependencies #audit #compliance #secrets #static-analysis

Ready to run

npx skills add https://github.com/pwarnock/liaison-toolkit --skill security-scanning-pwarnock

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-scanning
Source: https://github.com/pwarnock/liaison-toolkit/tree/main/.skills/security-scanning
Command: npx skills add https://github.com/pwarnock/liaison-toolkit --skill security-scanning-pwarnock

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill automates comprehensive security checks to identify vulnerabilities, secrets, and misconfigurations across codebases.

Core Features & Use Cases

Dependency auditing with Bun and npm, plus Snyk integration for consolidated risk reporting
Secret detection via pre-commit hooks and gated checks to prevent credential leakage
Static code analysis and security linting to enforce secure coding practices
Vulnerability management and pre-deployment gates to block unsafe releases

Quick Start

bun audit npm audit snyk test Enable pre-commit secrets scanning and CI-based security gates.

Frequently Asked Questions about security-scanning

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I run a security audit and vulnerability scan for a Node.js project?▼

To run a security audit for Node.js, execute dependency checks using bun audit or npm audit, integrate Snyk test for consolidated risk reporting, and enable static analysis to identify vulnerabilities and misconfigurations.

Can I set up pre-commit hooks for secret detection in my CI pipeline?▼

Yes, you can enforce secret detection in CI pipelines by enabling pre-commit hooks and gated checks, which scan code changes to prevent credential leakage before commits are finalized or deployments proceed.

What is the best way to block unsafe releases with pre-deployment security gates?▼

The best way to block unsafe releases is by implementing pre-deployment security gates that combine static code analysis, dependency auditing, and vulnerability management to halt deployments when critical flaws are detected.

Does Snyk integration work with bun audit for vulnerability management?▼

Snyk integration works alongside bun audit by providing consolidated risk reporting, allowing you to execute dependency audits and manage vulnerabilities across your TypeScript and Node.js software projects.

How do I enforce secure coding practices with static analysis and security linting?▼

You enforce secure coding practices by configuring static code analysis and security linting within your code review process, automatically identifying misconfigurations and vulnerabilities before code is merged.