swain-security-check

Orchestrate multiple security scanners to produce a unified findings report.

1|Updated Mar 10, 2026

Search Tags:#automation #security #orchestration #reporting #scanning #gitleaks

Ready to run

npx skills add https://github.com/cristoslc/south-portland-school-budget-FY27 --skill swain-security-check

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: swain-security-check
Source: https://github.com/cristoslc/south-portland-school-budget-FY27/tree/main/.agents/skills/swain-security-check
Command: npx skills add https://github.com/cristoslc/south-portland-school-budget-FY27 --skill swain-security-check

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Automatically coordinates multiple security scanners to produce a unified risk report for a codebase, reducing manual audit overhead.

Core Features & Use Cases

Orchestrates gitleaks, osv-scanner/trivy, semgrep, and built-in checks to surface vulnerabilities and policy violations.
Produces a single, severity-bucketed findings report suitable for quick reviews and governance.
Use case: when preparing a security review of a project, run the tool to get a comprehensive security snapshot.

Quick Start

Run the security check across your repository to generate a consolidated security report.

Frequently Asked Questions about swain-security-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate security scanning across multiple code repositories?▼

Automating security scanning across code repositories is achieved by orchestrating multiple scanners to produce a unified risk report, reducing manual audit overhead. This tool coordinates various scanners to surface vulnerabilities, secrets, and policy violations automatically.

Can I generate a unified security report combining findings from gitleaks, semgrep, and osv-scanner?▼

Generating a unified security report combining gitleaks, semgrep, and osv-scanner is supported. The tool orchestrates these scanners to produce a single, severity-bucketed findings report suitable for quick reviews and governance across software projects.

What is the best way to prepare a security review for a software project in CI workflows?▼

Preparing a security review for a software project in CI workflows involves running an automated security check to get a comprehensive snapshot. This orchestrates built-in checks and optional integrations to surface vulnerabilities and compliance issues.

Does this security orchestration tool work if some scanners are unavailable?▼

Security orchestration works even if some scanners are unavailable through graceful degradation. The tool implements built-in checks and optional integrations, ensuring automated end-to-end scanning continues to produce a consolidated security report.

How do I detect leaked secrets and compliance issues in my codebase?▼

Detecting leaked secrets and compliance issues in a codebase is done by running automated security scanning. The tool orchestrates gitleaks and built-in checks to surface secrets, vulnerabilities, and policy violations, producing a severity-bucketed findings report.