security-sweep

Solid

Scan codebase for security vulnerabilities, hardcoded secrets, injection flaws, misconfigurations, and attack surfaces. Use when user wants a security audit, vulnerability scan, or to find security issues.

Code & Development 0 stars 0 forks Updated yesterday MIT

Install

View on GitHub

Quality Score: 78/100

Stars 20%
0
Recency 20%
100
Frontmatter 20%
70
Documentation 15%
100
Issue Health 10%
80
License 10%
100
Description 5%
100

Skill Content

# Security Sweep Run a comprehensive security scan of the codebase. This skill identifies vulnerabilities, hardcoded secrets, injection flaws, misconfigurations, and attack surfaces across web and mobile applications. ## Arguments - `$0` (optional): Scan scope — one of: `all`, `secrets`, `injection`, `auth`, `config`, `deps`, `ai`, `mobile`, `data`. Defaults to `all`. - `$1` (optional): Path to scan. Defaults to the project root. If `$ARGUMENTS` is empty, run a full `all` scan from the project root. ## Execution Plan ### Step 1: Tech Stack Detection Before scanning, detect the project's tech stack by checking for indicator files. This determines which language-specific checks to run. | Indicator File | Stack | Scan Focus | |---|---|---| | `package.json` | Node.js/JS/TS | npm patterns, XSS sinks, eval, child_process | | `requirements.txt`, `pyproject.toml`, `setup.py`, `Pipfile` | Python | pickle, subprocess, Jinja2, Django/Flask patterns | | `pom.xml`, `build.gradle`, `build.gradle.kts` | Java/Kotlin | JDBC injection, ObjectInputStream, Spring patterns | | `Gemfile` | Ruby | Marshal, system(), ERB patterns | | `go.mod` | Go | fmt.Sprintf in SQL, crypto patterns | | `Cargo.toml` | Rust | unsafe blocks, FFI | | `composer.json` | PHP | exec, unserialize, include with vars | | `*.csproj` | .NET | BinaryFormatter, SqlCommand concat | | `AndroidManifest.xml` | Android | exported components, cleartext, SharedPreferences | | `Info.plist`, `*.xcodeproj`, `Podfile` | iOS | NSUs...

Details

Author
Ksx9797
Repository
Ksx9797/security-sweep-plugin
Created
2 months ago
Last Updated
yesterday
Language
N/A
License
MIT

Integrates with

Django · Backend

Similar Skills

Semantically similar based on skill content — not just same category

Code & Development Listed

security-scan

Scan a repo for secrets, dependency CVEs, container CVEs/SBOM, GitHub Actions issues, authn/authz anti-patterns, and posture gaps across three tiers. Report only — no code changes.

8 Updated today
app-vitals
AI & Automation Solid

code-vuln-audit

Scan code for security issues: dependency vulnerabilities (npm/pip audit), secret leaks (regex and entropy analysis), and OWASP anti-patterns like SQL injection, XSS, or command injection. Use when the user mentions security scans, vulnerability detection, secret leaks, API keys, OWASP, npm audit, pip-audit, hardcoded passwords, or code security checks.

4 Updated 1 weeks ago
serejaris
AI & Automation Featured

code-vuln-audit

Scan code for security issues: dependency vulnerabilities (npm/pip audit), secret leaks (regex and entropy analysis), and OWASP anti-patterns like SQL injection, XSS, or command injection. Use when the user mentions security scans, vulnerability detection, secret leaks, API keys, OWASP, npm audit, pip-audit, hardcoded passwords, or code security checks.

4,441 Updated 2 days ago
zebbern