Agent skill · security · aiskillstore
security
Security validation, vulnerability scanning, and compliance checking.
Why this skill is useful
Adds executable scripts for vulnerability scanning and compliance checks that enhance security validation capabilities.
What it needs
Requires bandit, pip-audit, safety, semgrep installed locally. About 1k tokens when loaded. Last updated 2026-08-07. 405 stars on the source repository.
What this skill does
Security Skill Security validation, vulnerability scanning, and compliance checking. Activation Auto-activates on keywords: security, vulnerability, audit, OWASP, encryption, GPG, SSH, signing, secrets, scan, bandit Workflows Environment Validation validate-env.md: GPG/SSH key validation Scanning scan.md: Security vulnerability scanning Encryption encrypt.md: Secret encryption and management Commands Security Checklist Pre-Commit [ ] No secrets in code (checked by gitleaks) [ ] Dependencies scanned for vulnerabilities [ ] Bandit security scan passes Pre-Release [ ] All known vulnerabilities addressed [ ] Security advisory published (if applicable) [ ] Dependencies updated to secure versions OWASP Top 10 Considerations 1. Injection: Use parameterized queries, validate input 2. Broken Authentication: Use secure session management 3. Sensitive Data Exposure: Encrypt sensitive data at rest and in transit 4. XML External Entities: Disable external entity processing 5. Broken Access Control: Implement proper authorization checks 6. Security Misconfiguration: Use secure defaults 7. XSS: Escape output, use Content Security Policy 8. Insecure Deserialization: Validate and sanitize serialized data 9. Using Components with Known Vulnerabilities: Keep dependencies updated 10. Insufficient Logging: Log security events, monitor for anomalies
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aiskillstore/security