Agent skill · security · jeremylongshore
security-scanning
Use when checking code for vulnerabilities, linting shell scripts, scanning containers or IaC for security issues, or managing encrypted secrets
Why this skill is useful
Adds executable scripts for vulnerability scanning, linting, and secret management that enhance the AI's capabilities in security practices.
What it needs
Requires shellcheck, sops, trivy installed locally. About 2k tokens when loaded. Last updated 2026-08-07. 2,604 stars on the source repository.
What this skill does
Security Scanning When to Use Scanning a project directory for known vulnerabilities (CVEs) Scanning a container image before deployment Scanning Infrastructure-as-Code (Terraform, CloudFormation) for misconfigurations Linting shell scripts for bugs, pitfalls, and unsafe patterns Encrypting or decrypting secrets stored in YAML/JSON config files Checking dependencies for known security issues Tools Tool Purpose Structured output ------ --------- ------------------- Trivy Vulnerability scanner for filesystems, containers, IaC --format json or --format sarif ShellCheck Static analysis and linting for shell scripts -f json for JSON output sops Encrypt/decrypt secrets in YAML, JSON, ENV files Outputs decrypted file to stdout Patterns Scan project directory for vulnerabilities Scan project and show results in terminal Scan a container image Scan Terraform files for misconfigurations Scan a lockfile (package-lock.json, requirements.txt, etc.) Generate SARIF report for CI integration Lint a shell script with JSON output Lint all shell scripts in a directory Lint with specific severity threshold Encrypt a secrets file with sops (using age key) Decrypt a secrets file to stdout Edit encrypted file in-place Decrypt a single value Pipelines Scan and summarize critical findings Each stage: Trivy scans and outputs JSON, jq filters to critical vulnerabilities and extracts key fields. Lint all shell scripts and count issues by severity Each stage: ShellCheck lints all scripts to JSON, jq groups and counts by severity level. Scan image and fail if critical vulns found Each stage: Trivy scans image, jq checks for critical vulns and exits non-zero if any found. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills jeremylongshore/security-scanning