skills.rest
mdnaimul22
mdnaimul22COMMUNITY
Explore all skills by this author →
GitHub

senior-secops

Scan source code for injection and secret patterns, assess dependency CVEs, and verify compliance controls.

2|Updated Apr 15, 2026
Search Tags:#PCI-DSS#vulnerability management#SOC 2#security auditing#secrets scanning#compliance verification#SAST/DAST patterns
One-click install
npx skills add https://github.com/mdnaimul22/human-skills --skill senior-secops-mdnaimul22
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: senior-secops
Source: https://github.com/mdnaimul22/human-skills/tree/main/skills/senior-secops
Command: npx skills add https://github.com/mdnaimul22/human-skills --skill senior-secops-mdnaimul22

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill helps you reduce real security risk by systematically scanning code and dependencies, assessing known vulnerabilities, and verifying security controls against major compliance frameworks so you can remediate issues quickly and consistently.

Core Features & Use Cases

  • SAST-style code scanning: Detects high-signal patterns such as hardcoded secrets, SQL injection, XSS, command injection, and path traversal to support security reviews and secure development workflows.
  • Dependency vulnerability assessment: Identifies CVEs across npm, Python, and Go ecosystems (including package-lock/go.mod/requirements artifacts) and outputs remediation-oriented risk details.
  • Compliance control verification: Evaluates security controls mapped to SOC 2, PCI-DSS, HIPAA, and GDPR themes (access control, encryption, logging, authentication, and security testing) to support audit readiness.
  • Operational workflows: Provides ready-to-execute audit, CI/CD security gate, CVE triage, and incident response procedures that align scanner outputs with practical next steps.

Quick Start

Use the senior-secops skill to run a full security audit of the current project and produce actionable security and compliance checks in one go.

Frequently Asked Questions about senior-secops

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security auditing for SOC 2 and PCI-DSS compliance?▼

Automate security auditing by running deterministic Python tooling that scans source code for injection and secret patterns, assesses dependency vulnerabilities, and checks security-control coverage mapped to SOC 2 and PCI-DSS frameworks.

What's the best way to scan source code for hardcoded secrets and SQL injection?▼

The best way to scan source code for hardcoded secrets and SQL injection is using SAST-style code scanning that detects high-signal patterns to support security reviews and secure development workflows.

Does vulnerability assessment work with npm, Python, and Go dependencies?▼

Yes, vulnerability assessment works with npm, Python, and Go dependencies by identifying CVEs across package-lock, requirements, and go.mod artifacts to output remediation-oriented risk details.

How do I use security scanning to gate CI/CD pull requests and deployments?▼

Gate CI/CD pull requests and deployments by applying scanner outputs with severity thresholds and guardrail exit codes that block deployments when critical security findings are detected.

Can I verify HIPAA and GDPR security controls during a pre-incident triage?▼

Yes, you can verify HIPAA and GDPR security controls during pre-incident triage by evaluating access control, encryption, logging, and authentication themes mapped to those compliance frameworks.

What limitations exist when checking CVE remediation across multiple ecosystems?▼

Checking CVE remediation is limited to npm, Python, and Go ecosystems, requiring deterministic Python tooling to assess known vulnerabilities and output JSON reports with guardrail exit codes.

Related Skills

Explore More Legal & Compliance Skills→
thatrebeccaraethatrebeccarae
97

dep-audit

Scan Node.js, Python, Rust, and Go manifests for outdated packages, advisories, and license issues.

Community
Advanced
zapabobzapabob
2

sec-audit

Scan dependencies and custom code for security vulnerabilities.

Community
Advanced
spallempatispallempati

secure-coding-enforcement

Integrate SAST tools into CI/CD to block pull requests with high-severity findings.

Community
Advanced
mohitmishra786mohitmishra786

security

Scan code, dependencies, containers, and cloud configurations for security vulnerabilities.

Community
Advanced