Security findings checked against your code.
Checks a codebase for dependency vulnerabilities, exposed secrets, and risky code patterns, then reports findings verified against the source.
When to use it
Use for security reviews of pull requests, audits of authentication or input handling, checks before production deployment, or requested security scans.
Give it a codebase to scan; it reports source-checked security findings and identifies which scan phases ran.
What you provide
Requires the Ruflo MCP connection exposing memory_store and hooks_post-task to store findings and train patterns.
This skill
Ruflo
Stores findings in Ruflo
npx @claude-flow/cli@latest
The latest security scanner