Scan SKILL.md files and scripts for security vulnerabilities and coding issues.
npx skills add https://github.com/aeoncity-demo/myaeon --skill skill-scan-aeoncity-demo
Please help me install this Agent Skill. Skill: Skill Scan Source: https://github.com/aeoncity-demo/myaeon/tree/main/skills/skill-scan Command: npx skills add https://github.com/aeoncity-demo/myaeon --skill skill-scan-aeoncity-demo
This Skill identifies potential security risks and coding issues in SKILL.md files, workflows, and scripts, ensuring code safety and adherence to security best practices.
Run the 'skill-scan' command to perform a full security scan of all SKILL.md files and associated scripts.
High-intent search queries and answers about installing and using this skill.
To audit your codebase for security vulnerabilities, you can run the 'skill-scan' command. It identifies threats like shell injection, secret exfiltration, and path traversal in SKILL.md files, workflows, and scripts while enforcing coding best practices.
The best way to prevent shell injection and secret exfiltration is to integrate a security risk audit into your CI/CD pipeline. Scanning SKILL.md files and scripts before execution ensures adherence to security standards and blocks destructive commands.
Yes, you can use this tool to scan local scripts and workflows. It requires local execution to identify potential security risks and coding issues in SKILL.md files and associated scripts, with optional configuration for trusted sources and suppression rules.
To configure suppression rules for a security risk assessment, you can set up optional configurations for trusted sources. This allows you to manage exceptions and focus the audit on genuine vulnerabilities like path traversal and secret exfiltration.
Yes, vulnerability detection works with CI/CD pipelines. You can integrate this Skill to automatically scan SKILL.md files and workflows before execution, reducing the risk of security breaches and improving overall code quality.
nikrichConfigure CSP directives in tauri.conf.json for Tauri desktop apps.
mahg-esDesign and enforce CI/CD quality gates for code, tests, security, build, E2E, and performance.
devkeniValidate GitLab CI/CD YAML syntax, best practices, and security issues.
Ed1s0nZAnalyze Android and iOS applications for security vulnerabilities using static and dynamic techniques.
