sentinel

Scan code commits for secrets, OWASP top 10 patterns, and dependency vulnerabilities.

82|23|Updated Feb 24, 2026
One-click install
npx skills add https://github.com/Rune-kit/rune --skill sentinel-rune-kit
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: sentinel
Source: https://github.com/Rune-kit/rune/tree/main/skills/sentinel
Command: npx skills add https://github.com/Rune-kit/rune --skill sentinel-rune-kit

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill acts as an automated security gatekeeper, preventing unsafe code from being committed by scanning for secrets, vulnerabilities, and insecure patterns before they enter the codebase.

Core Features & Use Cases

  • Secret Scanning: Detects hardcoded API keys, tokens, and other sensitive credentials.
  • Vulnerability Auditing: Checks dependencies for known CVEs and flags critical security flaws.
  • Insecure Pattern Detection: Identifies common security risks like SQL injection, XSS, and insecure configurations.
  • Use Case: Before committing a new feature, run Sentinel to ensure no accidental exposure of API keys or introduction of critical vulnerabilities, maintaining a secure codebase.

Quick Start

Run a full security scan on the current project files.

Frequently Asked Questions about sentinel

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent hardcoded secrets and API keys from being committed to my repository?

Secret scanning prevents hardcoded API keys and tokens from entering your codebase by acting as an automated gatekeeper that blocks commits containing sensitive credentials before they are deployed.

Can I enforce security policies as a hard gate in my CI/CD pipeline?

Yes, you can enforce security policies as a hard gate in CI/CD pipelines by blocking commits with critical findings and warning on less severe issues to prevent insecure code deployment.

What is automated vulnerability auditing for code commits?

Automated vulnerability auditing checks project dependencies for known CVEs and flags critical security flaws, preventing vulnerable code from being committed and deployed through automated security gatekeeping.

How do I detect OWASP top 10 insecure patterns like SQL injection before deployment?

Detecting OWASP top 10 insecure patterns like SQL injection and XSS involves scanning code commits for common security risks and insecure configurations before they enter the codebase.

Does this security gatekeeper support permission checks for code commits?

Yes, the security gatekeeper supports permission checks alongside secret scanning and vulnerability auditing to enforce comprehensive security policies and block unauthorized or insecure commits.

When should I use an automated security gatekeeper instead of manual code review?

Use an automated security gatekeeper when you need to prevent unsafe code from being committed by scanning for secrets, vulnerabilities, and insecure patterns before deployment, augmenting manual reviews.