skill-security-review

Name: skill-security-review
Availability: InStock
Author: codgician

Audit code changes for secret exposure and infrastructure misconfigurations.

14|3|Updated Jul 23, 2023

Search Tags:#security #audit #compliance #secrets #terraform #risk

Ready to run

npx skills add https://github.com/codgician/serenitea-pot --skill skill-security-review

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: skill-security-review
Source: https://github.com/codgician/serenitea-pot/tree/main/.opencode/skills/skill-security-review
Command: npx skills add https://github.com/codgician/serenitea-pot --skill skill-security-review

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security audits are essential before changes are merged or deployed to ensure secrets are not exposed, services are not unintentionally exposed, and infrastructure configurations remain compliant with policy.

Core Features & Use Cases

Role-based audit approach that scrutinizes changes touching secrets, services, Terraform configurations, and host definitions.
Checks for secret exposure, misconfigurations, and least-privilege access patterns across environments.
Use Case: Before merging a PR that updates infrastructure or service configurations, perform a deterministic audit to catch misconfigurations and risky exposures early.

Quick Start

Provide the changed files, target hosts, intent, and exposure context to initiate the audit.

Frequently Asked Questions about skill-security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate security audits for Terraform and infrastructure code changes?▼

Automate infrastructure security audits by feeding changed Terraform files, target hosts, intent, and exposure context into a review workflow that identifies secret exposure, misconfigurations, and least-privilege violations before deployment.

What is the best way to check for secret exposure before merging a pull request?▼

Checking for secret exposure before merging requires a pre-commit or pre-deploy audit that scrutinizes changes touching secrets, services, and hosts to catch risky exposures and policy violations early in the workflow.

Can I perform a compliance and risk assessment on service configurations before deployment?▼

You can perform compliance and risk assessments on service configurations before deployment by applying a deterministic audit that checks for access control issues, misconfigurations, and unintentional public exposure across environments.

What inputs do I need to provide to run an automated security review on code changes?▼

To run an automated security review, you need to provide the changed files, target hosts, deployment intent, and public exposure context to perform a thorough assessment of risk and compliance.

Does this security audit approach work for both application and infrastructure changes?▼

This security audit approach works for both application and infrastructure changes, applying role-based scrutiny to updates touching secrets, services, Terraform configurations, and host definitions across environments.