security

Enforce OWASP security patterns, manage secrets, and automate security testing.

1|Updated Apr 13, 2025

Search Tags:#security #owasp #secure coding #secrets management #dependency audit #vulnerability scanning

Ready to run

npx skills add https://github.com/warrencammack/qnap --skill security-warrencammack

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security
Source: https://github.com/warrencammack/qnap/tree/main/.claude/skills/security
Command: npx skills add https://github.com/warrencammack/qnap --skill security-warrencammack

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill establishes and enforces robust security practices across your projects, preventing common vulnerabilities and protecting sensitive information.

Core Features & Use Cases

Secrets Management: Detects and prevents accidental commits of secrets and sensitive data.
Dependency Auditing: Scans project dependencies for known vulnerabilities.
Secure Coding Practices: Provides guidelines and checks for preventing common web vulnerabilities like SQL injection and XSS.
Use Case: Before merging code, this Skill automatically runs checks to ensure no API keys are exposed, dependencies are up-to-date, and common security anti-patterns are avoided, significantly reducing the risk of breaches.

Quick Start

Run the security skill to perform a comprehensive security audit on the current project.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I prevent secrets and API keys from being committed to git?▼

Prevent secrets from being committed by configuring gitignore rules and validating environment variables. This approach detects accidental commits of sensitive data, ensuring API keys remain protected before code merges.

What is the best way to automate dependency vulnerability scanning before merging code?▼

Automate dependency vulnerability scanning using GitHub Actions workflows and pre-commit hooks. This scans project dependencies for known vulnerabilities, ensuring dependencies are up-to-date and secure before merging code.

How do I enforce secure coding patterns for SQL injection and XSS in my project?▼

Enforce secure coding patterns for SQL injection and XSS by applying OWASP security guidelines. This provides input validation checks to prevent common web vulnerabilities, significantly reducing breach risks during development.

Can I use GitHub Actions workflows to enforce authentication best practices like JWT and password hashing?▼

Yes, you can use GitHub Actions workflows to enforce authentication best practices. This validates JWT implementations, password hashing, and rate limiting configurations to protect authentication flows in your software projects.

Does automated security testing cover path traversal vulnerabilities?▼

Yes, automated security testing covers path traversal vulnerabilities. It enforces OWASP security patterns by validating file path inputs, preventing malicious directory navigation attempts across your software projects.