skills.rest
jdforsythe
jdforsytheCOMMUNITY
Explore all skills by this author →
GitHub

wolfe-security

Automates repository security auditing and verifies vulnerability findings.

Updated Jun 15, 2026
Search Tags:#automated testing#vulnerability detection#security auditing#CI/CD integration#repository security
One-click install
npx skills add https://github.com/jdforsythe/wolfe-pack --skill wolfe-security
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: wolfe-security
Source: https://github.com/jdforsythe/wolfe-pack/tree/main/templates/bots/wolfe-security
Command: npx skills add https://github.com/jdforsythe/wolfe-pack --skill wolfe-security

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pypdf, pdfplumber, pdf2image, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a comprehensive security audit for your repository, automatically identifying and verifying potential security vulnerabilities.

Core Features & Use Cases

  • Security Auditing: Identifies and verifies common security vulnerabilities such as injection flaws, authentication issues, and secret exposure.
  • Verification: Ensures findings are validated through two-lane verification: local repro or tool verification.
  • File-Only Findings: Files findings as issues rather than PRs, ensuring human oversight for security-related changes.
  • Use Case: Integrate this Skill into your CI/CD pipeline to automatically scan and address security issues in your codebase.

Quick Start

Run the security audit for your repository with /wolfe-security.

Frequently Asked Questions about wolfe-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate vulnerability detection in my repository?▼

Automate security auditing by scanning your repository for injection flaws, secrets, and vulnerable dependencies, then verifying findings through local repro or tool output before filing them as issues.

Can I integrate security auditing into my CI/CD pipeline?▼

Yes, you can integrate security auditing into your CI/CD pipeline to automatically scan your codebase for vulnerabilities, verifying findings through local repro or tool output before filing them as issues.

What types of security vulnerabilities can an automated audit identify?▼

An automated security audit identifies injection flaws, authentication issues, secret exposure, dangerous deserialization, SSRF, path traversal, weak crypto, and vulnerable dependencies, verifying each finding before reporting.

How are security findings reported and managed after detection?▼

Security findings are filed as issues rather than pull requests, ensuring human oversight for security-related changes after vulnerabilities are verified through two-lane verification.

Does the repository security audit require any configuration files?▼

Yes, the security audit reads bindings from a ./WOLFE.md file in your repository, utilizing the wolfe-pack framework to guide the automated vulnerability detection and verification process.

How does the security audit verify detected vulnerabilities?▼

The security audit verifies detected vulnerabilities through two-lane verification, using either local reproduction or tool output to validate findings before filing them as issues.

Related Skills

Explore More Software Engineering Skills→
jdforsythejdforsythe

wolfe-test-gaps

Detect test coverage gaps and create test-only PRs in the wolfe-pack repository.

Community
Advanced
seikaikyoseikaikyo
2

security-reviewer

Identify and remediate OWASP Top 10 security vulnerabilities in backend services.

Community
Advanced
moogieonmoogieon

cso

Audit infrastructure security with Python scripts and external tools.

Community
Advanced
kivo360kivo360
1

moai-domain-security

Mitigate security vulnerabilities in CI/CD pipelines using OWASP Top 10 and SAST/DAST workflows.

Community
Advanced