skills.rest
anajuliabit
anajuliabitCOMMUNITY
Explore all skills by this author →
𝕏@anajuliabitGitHub

Skill Security Scan

Audit Aeon skills, scripts, and CI workflows for security risks.

6|2|Updated May 21, 2026
Search Tags:#security audit#GitHub Actions#prompt injection#code scanning#risk remediation#delta tracking#secret exfiltration
One-click install
npx skills add https://github.com/anajuliabit/aeon --skill skill-security-scan-anajuliabit
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Skill Security Scan
Source: https://github.com/anajuliabit/aeon/tree/main/skills/skill-security-scan
Command: npx skills add https://github.com/anajuliabit/aeon --skill skill-security-scan-anajuliabit

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill helps you prevent security regressions by automatically auditing Aeon skills, companion scripts, and GitHub Actions workflows for common injection, exfiltration, traversal, and prompt-override risks before they run.

Core Features & Use Cases

  • Security corpus scanning: Scans skill instruction files (SKILL.md), companion scripts (.sh/.py), CI workflows (.yml), and repo-level scripts for risky patterns.
  • Delta tracking with baseline suppression: Compares against the previous scan snapshot to identify new, resolved, and persistent findings while suppressing known false positives via a human-reviewed baseline.
  • Operator-facing remediation loop: Files issues only for NEW high-severity findings, writes a structured report, and notifies when attention is needed.

Quick Start

Ask the agent to run the security scan across the full skills corpus to produce a dated report and flag any new high-severity findings that need attention.

Frequently Asked Questions about Skill Security Scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan GitHub Actions workflows for prompt injection and secret exfiltration risks?▼

Scanning GitHub Actions workflows for prompt injection and secret exfiltration risks involves running a deterministic scan.sh that audits CI workflows and companion scripts, emitting structured HIGH/MEDIUM/LOW findings for identified security vulnerabilities.

What is delta tracking in security audits and how does baseline suppression work?▼

Delta tracking in security audits compares the current scan snapshot against a previous state to identify new, resolved, and persistent findings, while baseline suppression ignores known false positives documented in a human-reviewed file.

Can I run a security audit on specific skill instruction files instead of the whole codebase?▼

Yes, you can run a security audit on specific skill instruction files by applying scoped scanning via environment variables, targeting individual SKILL.md files or companion scripts rather than executing a full corpus scan.

How to automate pre-merge security verification for agent framework codebases?▼

Automating pre-merge security verification for agent framework codebases requires executing a deterministic security scan that audits skills and workflows, generating a dated report and flagging new high-severity findings that require attention before merging.

Does the security scan automatically file issues for all detected vulnerabilities?▼

No, the security scan does not file issues for all detected vulnerabilities; it specifically files issues only for NEW high-severity findings, writes a structured report, and notifies operators when remediation attention is needed.

Related Skills

Explore More Legal & Compliance Skills→
ManfronEnricoManfronEnrico

workspace-audit

Scan repositories for Claude hygiene, dependency, and source quality violations.

Community
Advanced
apacheapache
79

magpie-workflow-security-audit

Audit GitHub Actions workflows for security vulnerabilities and remediation suggestions.

Official
Advanced
tneztnez

ci-health-check

Monitor GitHub Actions workflow runs and diagnose failures.

Community
Intermediate
ngquaanghuyngquaanghuy

skill-security-auditor

Analyze AI agent skill files for command injection, data exfiltration, and prompt injection.

Community
Advanced