skills.rest
cristoslc
cristoslcCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

swain-security-check

Orchestrate multiple security scanners to produce a unified findings report.

1|Updated Mar 10, 2026
Search Tags:#automation#security#orchestration#reporting#scanning#gitleaks
One-click install
npx skills add https://github.com/cristoslc/south-portland-school-budget-FY27 --skill swain-security-check
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: swain-security-check
Source: https://github.com/cristoslc/south-portland-school-budget-FY27/tree/main/.agents/skills/swain-security-check
Command: npx skills add https://github.com/cristoslc/south-portland-school-budget-FY27 --skill swain-security-check

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Automatically coordinates multiple security scanners to produce a unified risk report for a codebase, reducing manual audit overhead.

Core Features & Use Cases

  • Orchestrates gitleaks, osv-scanner/trivy, semgrep, and built-in checks to surface vulnerabilities and policy violations.
  • Produces a single, severity-bucketed findings report suitable for quick reviews and governance.
  • Use case: when preparing a security review of a project, run the tool to get a comprehensive security snapshot.

Quick Start

Run the security check across your repository to generate a consolidated security report.

Frequently Asked Questions about swain-security-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security scanning across multiple code repositories?▼

Automating security scanning across code repositories is achieved by orchestrating multiple scanners to produce a unified risk report, reducing manual audit overhead. This tool coordinates various scanners to surface vulnerabilities, secrets, and policy violations automatically.

Can I generate a unified security report combining findings from gitleaks, semgrep, and osv-scanner?▼

Generating a unified security report combining gitleaks, semgrep, and osv-scanner is supported. The tool orchestrates these scanners to produce a single, severity-bucketed findings report suitable for quick reviews and governance across software projects.

What is the best way to prepare a security review for a software project in CI workflows?▼

Preparing a security review for a software project in CI workflows involves running an automated security check to get a comprehensive snapshot. This orchestrates built-in checks and optional integrations to surface vulnerabilities and compliance issues.

Does this security orchestration tool work if some scanners are unavailable?▼

Security orchestration works even if some scanners are unavailable through graceful degradation. The tool implements built-in checks and optional integrations, ensuring automated end-to-end scanning continues to produce a consolidated security report.

How do I detect leaked secrets and compliance issues in my codebase?▼

Detecting leaked secrets and compliance issues in a codebase is done by running automated security scanning. The tool orchestrates gitleaks and built-in checks to surface secrets, vulnerabilities, and policy violations, producing a severity-bucketed findings report.

Related Skills

Explore More Software Engineering Skills→
projectedanxprojectedanx
1

cipher

Audit source code repositories with a four-phase state machine for security vulnerabilities.

Community
Advanced
rajitsaharajitsaha
10

security

Detect security vulnerabilities and leaked secrets in software projects.

Community
Intermediate
Patasse97Patasse97

senior-secops

Automate security operations workflows for application reviews and compliance verification.

Community
Advanced
n4igmen4igme

sc3-vuln-scan

Orchestrate vulnerability scanners to produce a unified vulnerabilities.md report.

Community
Advanced