Harden code against injection, traversal, process, and secret-handling risks.
npx skills add https://github.com/styrene-lab/omegon --skill security-styrene-lab
Please help me install this Agent Skill. Skill: security Source: https://github.com/styrene-lab/omegon/tree/main/skills/security Command: npx skills add https://github.com/styrene-lab/omegon --skill security-styrene-lab
This Skill helps prevent common security mistakes during implementation and review, reducing the risk of injection, traversal, secret leakage, and unsafe process handling.
Review this codebase for security issues and apply the checklist to harden input handling, path validation, process spawning, and secret management.
High-intent search queries and answers about installing and using this skill.
Prevent path traversal by validating resolved file paths to ensure access stays root-bound, blocking escape attempts through directory traversal sequences or symlinks. This stops unauthorized file access outside intended directories.
Safely spawn child processes by using argument arrays instead of shell strings, enforcing execution timeouts, and avoiding inherited terminal I/O to prevent command injection and hanging.
Escape user-controlled values by applying context-appropriate encoding for HTML, JavaScript, SQL, and URLs to prevent injection attacks across web and systems code.
Yes, this security review approach applies to implementation and review work across web, CLI, TUI, and systems code where untrusted input, file paths, subprocesses, and credentials must be controlled.
Manage secrets by keeping credentials out of source code and logs, enforcing strict secret hygiene to prevent accidental leakage during implementation and deployment.
JylhisIdentify Python security footguns and provide safe patterns for subprocess, deserialization, and input handling.
barbosakjnScan codebases, dependencies, and configurations for security vulnerabilities with severity levels.
samjhechtDispatch a code-review subagent to verify implementation against plan or requirements.
hung-phanExplain SSRF attack mechanisms and mitigation best practices with code examples.
