Orchestrates VCP scans to identify codebase security and compliance gaps.
npx skills add https://github.com/Z-M-Huang/vcp --skill vcp-audit
Please help me install this Agent Skill. Skill: vcp-audit Source: https://github.com/Z-M-Huang/vcp/tree/main/plugins/vcp/skills/vcp-audit Command: npx skills add https://github.com/Z-M-Huang/vcp --skill vcp-audit
This Skill helps teams continuously validate codebases against VCP standards by orchestrating scans, collecting findings, and surfacing actionable remediation guidance.
Invoke the audit from your project root to begin a full audit across all applicable standards.
High-intent search queries and answers about installing and using this skill.
Auditing a codebase for security and compliance gaps involves orchestrating standard scans from your project root to collect findings and surface remediation guidance. This process continuously validates your code against configured standards.
Team-based scanning for codebase security validation uses domain partitioning to improve throughput and coverage across a project. This approach allows teams to concurrently audit specific domains during a release-readiness check.
Yes, a configured .vcp/config.json and access to standard rule data are required to run a VCP standard audit. These prerequisites enable the scanner to apply the correct rules and compliance modes to your project.
Yes, you can run a quick-release compliance check before publishing by selecting the quick-release mode. This scans applicable standards rapidly to provide release-readiness validation and structured findings.
You handle false positives during a codebase security scan by applying suppressible ignores to the structured findings. This filters out inaccurate results while preserving actionable remediation steps for valid security gaps.
The best way to continuously validate codebases against security standards is to orchestrate regular scans that aggregate findings into structured reports. This ensures ongoing compliance attestations and release-readiness checks across multiple domains.
Z-M-HuangCreate global and project VCP config files and detect plugin paths.
drdatarulzIdentify and report OWASP Top 10 security findings in pull requests with infrastructure context.
hatch3rValidate governance health by enforcing thresholds, scanning anti-slop language, and verifying audit invariants.
xu-xiangOrchestrate Django migrations, code quality, tests, and security scans.
