Find security weaknesses across your codebase.
Checks project code, dependencies, infrastructure, and repository settings for security weaknesses.
When to use it
Use when conducting security assessments of applications, infrastructure, AI agent configurations, or dependencies.
Give it a project to audit; it detects the stack, runs matching security checks, and reports findings.
What you provide
The dispatcher requires Bash 4+ for its scanner utilities and secrets scanner.
The skill declares the GitHub CLI required and uses it to audit repository security settings.
This skill
services or URLs contained in candidate secrets
Sends secrets for optional verification
npm
Submits dependencies for npm auditing