Scan code commits for secrets and dangerous patterns.
npx skills add https://github.com/CENKSSS/valocase-backend --skill security-watch
Please help me install this Agent Skill. Skill: security-watch Source: https://github.com/CENKSSS/valocase-backend/tree/main/.claude/skills/security-watch Command: npx skills add https://github.com/CENKSSS/valocase-backend --skill security-watch
Security-watch is designed to prevent the accidental inclusion of secrets and dangerous patterns in code before they are committed.
eval(), Function(), and innerHTML.http:// URLs, disabled TLS verification, and * CORS origins.Activate security scanning with /security-watch.
High-intent search queries and answers about installing and using this skill.
To scan code commits for security vulnerabilities, activate the scanning process to identify and flag common dangerous patterns and secrets in real-time. This prevents accidental inclusion of sensitive data like API keys and tokens before committing.
Code scanning detects secrets like API keys, passwords, tokens, and private keys. It also flags dangerous functions such as eval() and innerHTML, unsanitized template literals in SQL or shell commands, and insecure configurations like disabled TLS verification.
To prevent accidental secrets in source code before committing, use real-time security scanning to monitor and flag sensitive patterns. This catches API keys, passwords, and insecure configurations early in software development environments.
Yes, code scanning can detect insecure configurations by alerting on http:// URLs, disabled TLS verification, and wildcard CORS origins. It also identifies injection vectors through unsanitized template literals in SQL and shell commands.
Yes, security scanning operates without external dependencies, relying solely on internal scripts to scan and flag issues. This makes it easy to integrate into security-sensitive codebases to catch potential vulnerabilities early.
b0aseAudit codebases for vulnerabilities and generate prioritized fix plans with diffs.
NOMARJDetect hardcoded credentials and insecure default configurations in source code and config files.
EthansuttorAutomates AI-assisted pair programming with driver/navigator roles and real-time verification.
j7-devDetect OWASP Top 10 vulnerabilities and provide remediation guidance for software code.