Agent skill
safety-scan
Active Security Enforcement. Scans code for vulnerabilities (SAST), secrets (Gitleaks), and insecure dependencies (SCA) before commit/deployment.
Install this agent skill to your Project
npx add-skill https://github.com/majiayu000/claude-skill-registry/tree/main/skills/other/other/security-andreibesleaga-gabbe-5
SKILL.md
Safety Scan Skill
Goal
Prevent "Insecure Code" from entering the codebase by strictly enforcing security checks.
Flow
1. Credentials Check (Gitleaks)
Command: gitleaks detect --source . -v (or regex fallback)
Check: Are there API Keys, Tokens, or Passwords in the diff?
- If Found: BLOCK COMMIT. Auto-delete or
.gitignorethe secret. Alert Human.
2. Static Analysis (SAST)
Command: semgrep scan --config=p/security-audit (if installed) OR npm audit / pip-audit.
Check: High-Severity vulnerabilities (RCE, SQLi, XSS).
- If Found: BLOCK COMMIT. Invoke
ci-autofixto patch.
3. Logic & PII Check
Action: LLM Review of the diff.
- "Does this code log User PII?"
- "Does this code execute arbitrary system commands (
exec,eval)?" - If Risky: Add
# TODO: SECURITY REVIEWcomment and flag inproject/tasks.md.
Output
- PASS: "No critical issues found."
- FAIL: "Blocking Commit. Found [N] Issues."
Recommended Agent Skills
Expand your agent's capabilities with these related and highly-rated skills.
majiayu000/claude-skill-registry
agent-ops-spec
Manage specification documents in .agent/specs/. Use when user provides requirements, acceptance criteria, or feature descriptions that need to be tracked and validated against implementation.
majiayu000/claude-skill-registry
agent-ops-state
Maintain .agent state files. Use at session start, after meaningful steps, and before concluding: read/update constitution/memory/focus/issues/baseline consistently.
majiayu000/claude-skill-registry
agent-ops-spec
Manage specification documents in .agent/specs/. Use when user provides requirements, acceptance criteria, or feature descriptions that need to be tracked and validated against implementation.
majiayu000/claude-skill-registry
agent-ops-testing
Test strategy, execution, and coverage analysis. Use when designing tests, running test suites, or analyzing test results beyond baseline checks.
majiayu000/claude-skill-registry
agent-ops-testing
Test strategy, execution, and coverage analysis. Use when designing tests, running test suites, or analyzing test results beyond baseline checks.
majiayu000/claude-skill-registry
agent-ops-state
Maintain .agent state files. Use at session start, after meaningful steps, and before concluding: read/update constitution/memory/focus/issues/baseline consistently.
Didn't find tool you were looking for?