What problem does it solve? Security audits, vulnerability triage, and compliance verification are manual, error-prone processes that slow down development and leave gaps in security posture. This Skill automates security scanning, dependency vulnerability assessment, and multi-framework compliance checking so teams can detect issues early and maintain audit readiness. ## Core Features & Use Cases - Security Scanner: Detects hardcoded secrets, SQL injection, XSS, command injection, and path traversal patterns across Python, JavaScript, TypeScript, Go, and other source files with severity filtering and JSON reporting. - Vulnerability Assessor: Scans npm, Python, and Go dependency files for known CVEs with CVSS scores, affected versions, and fixed-version remediation guidance. - Compliance Checker: Verifies controls against SOC 2, PCI-DSS, HIPAA, and GDPR frameworks, producing compliance scores and evidence-backed findings. - Use Case: Add a CI/CD security gate to your pipeline that fails pull requests when critical vulnerabilities or hardcoded secrets are detected, then generate a combined JSON report for your security team. ## Quick Start Run a full security audit on my project by scanning the code for vulnerabilities, checking dependencies for CVEs, and verifying SOC 2 compliance.
