# Security Check

> Scan Python projects for credential leaks, secrets in code, insecure patterns, LLM API key exposure, PII leakage to external AI services, and .env/.gitignore misconfigurations. Focused on data science pipelines handling API keys, tokens, and LLM integrations.

- Skill: `majiayu000/security-check` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds add majiayu000/security-check`
- Raw SKILL.md: https://api.skillmd.com/api/skills/majiayu000/security-check/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: AI & ML
- Author: majiayu000 (https://skillmd.com/u/majiayu000)
- Updated: 2026-09-09
- Page: https://skillmd.com/skills/majiayu000/security-check

---


# Security Check Skill

Scan for credential leaks, insecure code patterns, and LLM security issues in Python data science projects.

## When to Activate

- Before committing changes
- After modifying `.env`, `.gitignore`, or config files
- When adding new API integrations or credentials
- When reviewing code that handles tokens, keys, or passwords
- When code sends data to external LLM APIs (Gemini, OpenAI, etc.)
- Periodic security hygiene checks

## Check Process

Read `skills/scan-process.md` for the full 6-step scan process with bash commands.

## Pattern Reference

Read `skills/pattern-tables.md` for API key regex patterns, insecure Python code patterns, and LLM-specific security patterns with severity classifications.

## Behavioral Rules

Read `guidelines.md` for severity classifications, remediation requirements, and escalation rules.