Security Scanning

Comprehensive security analysis skill for detecting vulnerabilities, secrets, and security anti-patterns in codebases.

Core Capabilities

Secrets Detection

Scan for accidentally committed secrets and credentials:

Patterns to detect:

• API keys (AWS, GCP, Azure, Stripe, etc.)
• Private keys (RSA, SSH, PGP)
• Passwords and tokens in code
• Database connection strings with credentials
• JWT secrets and signing keys
• OAuth client secrets