senior-secops

Automate SAST/DAST scans, dependency vulnerability assessments, and compliance checks.

2|Updated Mar 13, 2026
One-click install
npx skills add https://github.com/zhangzhang-111-i/claude-skills111 --skill senior-secops-zhangzhang-111-i
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: senior-secops
Source: https://github.com/zhangzhang-111-i/claude-skills111/tree/main/engineering-team/senior-secops
Command: npx skills add https://github.com/zhangzhang-111-i/claude-skills111 --skill senior-secops-zhangzhang-111-i

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pypdf, pdfplumber, pdf2image, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a comprehensive toolkit to proactively identify, assess, and remediate security vulnerabilities in applications, ensuring compliance and robust defense against threats.

Core Features & Use Cases

  • Vulnerability Scanning: Detects hardcoded secrets, SQL injection, XSS, and more in code.
  • Dependency Assessment: Scans npm, Python, and Go dependencies for known CVEs.
  • Compliance Checks: Verifies adherence to SOC 2, PCI-DSS, HIPAA, and GDPR standards.
  • Use Case: Before deploying new code, run a full security audit using this Skill to catch critical vulnerabilities and ensure compliance with industry regulations.

Quick Start

Run a security audit on the current project directory.

Frequently Asked Questions about senior-secops

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate SAST and DAST scans for my application code?

Automate SAST and DAST scans by running this Skill on your project directory to detect hardcoded secrets, SQL injection, and XSS vulnerabilities. It performs static and dynamic analysis to identify injection flaws and provides remediation plans for secure development.

Can I check my project dependencies for known CVEs in Python and npm?

Yes, you can check Python, npm, and Go dependencies for known CVEs using this Skill. It performs dependency assessment to scan installed packages against vulnerability databases, identifying outdated or compromised libraries in your application stack.

What's the best way to verify compliance with SOC 2, PCI-DSS, HIPAA, and GDPR?

Verify SOC 2, PCI-DSS, HIPAA, and GDPR compliance by running this Skill to audit your codebase against industry regulations. It checks adherence to security standards and enforces policies, generating compliance verification reports for secure deployment.

Does this security audit tool detect hardcoded secrets in the source code?

Yes, this security audit tool detects hardcoded secrets within the source code. During SAST scans, it identifies exposed credentials and sensitive data, providing remediation plans to remove secrets and enforce secure development practices.

How do I get a remediation plan after finding vulnerabilities in my code?

Get a remediation plan by running this Skill after it identifies vulnerabilities through SAST, DAST, and dependency scans. It automatically generates actionable remediation steps for detected injection flaws, outdated packages, and compliance violations.

Can I enforce security policies for incident response before deploying new code?

Yes, you can enforce security policies for incident response before deploying new code. This Skill performs a full security audit, identifies critical vulnerabilities, and enforces compliance against SOC 2 and GDPR standards to ensure secure releases.