Security Skill

Scan code changes for OWASP Top 10 risks and hardcoded secrets.

Updated Feb 25, 2026
One-click install
npx skills add https://github.com/deanobalino/higgins --skill security-skill-deanobalino
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Security Skill
Source: https://github.com/deanobalino/higgins/tree/main/.higgins/skills/security
Command: npx skills add https://github.com/deanobalino/higgins --skill security-skill-deanobalino

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the critical need for robust code security by automating the identification and remediation of common vulnerabilities and insecure coding practices.

Core Features & Use Cases

  • Vulnerability Scanning: Automatically scans code for OWASP Top 10 vulnerabilities, hardcoded secrets, and injection flaws.
  • Secure Coding Guidance: Provides a checklist and guidelines to ensure adherence to best practices in authentication, input validation, and data protection.
  • Use Case: Before merging a pull request, run /security-check to get an automated review that flags potential security risks, ensuring the codebase remains secure.

Quick Start

Run the security skill to analyze the current code changes for any security issues.

Frequently Asked Questions about Security Skill

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan code changes for OWASP Top 10 vulnerabilities before merging?

Automated vulnerability scanning identifies OWASP Top 10 risks, hardcoded secrets, and injection vectors during code review. It provides actionable feedback to enforce secure authentication and input validation before merging code changes.

What is automated secrets detection in secure coding?

Automated secrets detection scans code changes to identify hardcoded credentials and enforce data protection measures. It flags sensitive information embedded in source code to prevent unauthorized access during the code review process.

Can I use automated security analysis for pull request code reviews?

Yes, you can run an automated security check before merging a pull request. The analysis flags potential security risks and enforces secure coding practices, ensuring the codebase remains secure during code reviews.

Does secure coding guidance cover input validation and authentication?

Secure coding guidance provides checklists and guidelines to ensure adherence to best practices for authentication and input validation. The automated analysis enforces these data protection measures during code reviews.

What's the best way to identify injection flaws in my source code?

Automating security analysis of code changes identifies injection vectors and common vulnerabilities. It provides developers with actionable feedback to remediate risks early and enforce secure coding practices.