verify

Scan code changes for security vulnerabilities before they are committed.

44|5|Updated Dec 10, 2025
One-click install
npx skills add https://github.com/Mburdo/knowledge_and_vibes --skill verify-mburdo
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: verify
Source: https://github.com/Mburdo/knowledge_and_vibes/tree/main/.claude/skills/verify
Command: npx skills add https://github.com/Mburdo/knowledge_and_vibes --skill verify-mburdo

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

UBS-based security scanning prevents vulnerable code from entering production by enforcing a mandatory guard before commits and during development.

Core Features & Use Cases

  • Direct execution of UBS to scan codebases for 1000+ bug patterns across multiple languages, with no subagents required.
  • Mandatory pre-commit gate and flexible scanning options (staged changes, diffs, or specific files) to catch issues early.
  • CI integration, language filters, and multiple output formats to fit into existing workflows and provide actionable results.

Quick Start

Run UBS on staged changes before committing and address any issues until clean.

Frequently Asked Questions about verify

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan code for security vulnerabilities before committing?

Scanning code for security vulnerabilities before committing involves running a pre-commit guard gate on staged changes. This process identifies over 1000 bug patterns across multiple languages and blocks the commit until all detected issues are resolved.

Can I integrate security scanning into my existing CI workflow?

Yes, you can integrate security scanning into your CI workflow. The scanner supports CI integration with configurable profiles, language filters, and multiple output formats, allowing automated vulnerability detection to fit directly into your existing pipeline.

Does pre-commit vulnerability scanning support languages like Python, Go, and Rust?

Pre-commit vulnerability scanning supports languages including JavaScript, Python, C, C++, Rust, Go, Java, and Ruby. You can apply language filters to target specific codebases and ensure only relevant files are analyzed during the scan.

What is a mandatory guard gate in pre-commit security scanning?

A mandatory guard gate in pre-commit security scanning is an enforced checkpoint that prevents vulnerable code from being committed. It automatically blocks commits if the scan detects security issues, requiring developers to fix problems before proceeding.

How do I run a security scan on specific files instead of staged changes?

To run a security scan on specific files instead of staged changes, you can configure the scanner to target individual files or diffs. This flexible scanning option allows you to analyze particular code segments without scanning the entire codebase.

Why does my pre-commit scan block commits when vulnerabilities are found?

Your pre-commit scan blocks commits when vulnerabilities are found because it enforces a mandatory guard gate. This security mechanism prevents vulnerable code from entering production by requiring all detected bug patterns to be addressed before the commit is allowed.