security
Installation
SKILL.md
Security Skill
Quick Reference
| Scanner | Purpose | What it Finds |
|---|---|---|
| Trivy | Vulnerability scanner | CVEs in deps, misconfigs |
| TruffleHog | Secrets scanner | API keys, passwords, tokens |
| Bandit | Python code security | SQL injection, exec(), etc. |
| pip-audit | Dependency vulnerabilities | Known CVEs in packages |
| Semgrep | Static analysis | Security anti-patterns |
GitHub Actions Pipeline
# Runs on every push/PR to main
.github/workflows/security.yml
Related skills