skills.rest
fengshao1227
fengshao1227COMMUNITY
Explore all skills by this author →
Website𝕏@CCG_WorkflowGitHub

verify-security

Scan codebases for security vulnerabilities and dangerous patterns.

5.8k|441|Updated Jan 4, 2026
Search Tags:#code review#OWASP#security#secure coding#vulnerability scanning#injection detection
One-click install
npx skills add https://github.com/fengshao1227/ccg-workflow --skill verify-security
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: verify-security
Source: https://github.com/fengshao1227/ccg-workflow/tree/main/templates/skills/tools/verify-security
Command: npx skills add https://github.com/fengshao1227/ccg-workflow --skill verify-security

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires @types/node, pdf2image, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automatically scans code for security vulnerabilities, detects dangerous patterns, and ensures that security decisions are documented, preventing security breaches and maintaining code integrity.

Core Features & Use Cases

  • Automated Security Scanning: Detects common vulnerabilities like SQL injection, XSS, hardcoded secrets, and path traversal.
  • Dangerous Pattern Detection: Identifies risky code constructs in Python, JavaScript, and Go.
  • Documentation Check: Verifies that security-related code changes have corresponding documentation in DESIGN.md.
  • Use Case: Before deploying a new feature that handles user input, automatically run this Skill to identify and fix any potential injection vulnerabilities, ensuring the application remains secure.

Quick Start

Run the security scanner on the current directory to check for vulnerabilities.

Frequently Asked Questions about verify-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for security vulnerabilities and injection flaws?▼

To scan your codebase for security vulnerabilities, this tool runs a JavaScript-based scanner to identify injection flaws, XSS, path traversal, SSRF, and hardcoded secrets across Python, JavaScript, and Go files.

What dangerous code patterns does an automated security scanner detect?▼

An automated security scanner detects dangerous patterns including SQL injection, sensitive data exposure, insecure deserialization, XXE, weak cryptography, and debug code to prevent security breaches.

Can I use this vulnerability scanning tool to check for OWASP secure coding issues?▼

Yes, you can use this vulnerability scanning tool to check for OWASP secure coding issues, as it identifies common injection flaws, XSS, path traversal, and insecure deserialization patterns.

How do I document security decisions when fixing detected vulnerabilities?▼

To document security decisions when fixing vulnerabilities, this scanner enforces checking that all security-related code changes have corresponding documentation written in a DESIGN.md file.

Does this code review scanner support Python, JavaScript, and Go files?▼

Yes, this code review scanner supports Python, JavaScript, and Go files, detecting risky code constructs and dangerous patterns across these languages to maintain code integrity.

What are the limitations of using a JavaScript-based scanner for vulnerability detection?▼

The limitations of this JavaScript-based scanner for vulnerability detection include requiring Node.js and pdf2image dependencies, meaning it needs proper environment setup before scanning your codebase.

Related Skills

Explore More Software Engineering Skills→
BaoNguyen09BaoNguyen09
6

install-mac

Install Node.js and project dependencies on macOS for development.

Community
Intermediate
darblexdarblex

Vulnerability Scanner

Detect and prioritize security vulnerabilities in source code repositories.

Community
Advanced
deanobalinodeanobalino

Security Skill

Scan code changes for OWASP Top 10 risks and hardcoded secrets.

Community
Intermediate
drsapaevdrsapaev
2

aif-security-checklist

Audit software security against OWASP Top 10 with automated scripts.

Community
Advanced