tools-only - Ensure dependencies are installed:
pip install safety==3.2.4 brew install gitleaks # or appropriate package manager - Scan for committed secrets:
gitleaks detect --verbose --redact- Resolve any findings before continuing.
- Audit Python dependencies (if requirements files exist):
for f in $(find . -name "requirements*.txt" 2>/dev/null); do safety check --full-report --file "$f" done - Record results in the commit template's Testing section.
- After a clean pass, proceed with commit and push workflow.
950 Security Scan 24bedfc4 by tools-only · 8c19bf8
npx skillmds@latest add tools-only/950-security-scan-24bedfc4 File contents
---name: 950-security-scan-24bedfc4description: Run the security scan gate before pushing.---1. Ensure dependencies are installed: ```bash pip install safety==3.2.4 brew install gitleaks # or appropriate package manager ```2. Scan for committed secrets: ```bash gitleaks detect --verbose --redact ``` - Resolve any findings before continuing.3. Audit Python dependencies (if requirements files exist): ```bash for f in $(find . -name "requirements*.txt" 2>/dev/null); do safety check --full-report --file "$f" done ```4. Record results in the commit template's Testing section.5. After a clean pass, proceed with commit and push workflow.
tools-only/X-Skills/tree/main/development/testing/950-security-scan_24bedfc4 commit 8c19bf83b4
Frequently asked questions
Run npx skillmds@latest add tools-only/950-security-scan-24bedfc4 in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.
Run the security scan gate before pushing. It is listed under Security on SkillMD.
This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.
This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.
Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.
tools-only (@tools-only) published this skill. Their other Agent Skills are listed on their SkillMD profile.