security-scan
Detect CWE-78 (command injection) regex patterns in Python, PowerShell, Bash, and C# files before PR submission. CWE-22 is delegated to CodeQL; see Scope. Use when you ask "scan for command injection", "CWE-78 check before PR". Do NOT use to decide whether security review is warranted (use security-detection).
- Version
- 2.0.0
- License
- MIT
Pinned to revision 6e62f3d0a901, so it is the text this page describes rather than whatever the author pushed since.
Files
- skills/security-scan/SKILL.md
- skills/security-scan/references/agent-guardrails-template.md
- skills/security-scan/references/agent-memory-inference-leakage.md
- skills/security-scan/references/autonomous-execution-guardrails.md
- skills/security-scan/references/dependency-risk-scoring.md
- skills/security-scan/references/powershell-security-checklist.md
- skills/security-scan/references/threat-model-template.md
- skills/security-scan/references/vulnerability-patterns.md
- skills/security-scan/scripts/scan_constants.py
- skills/security-scan/scripts/scan_format.py
- skills/security-scan/scripts/scan_patterns.py
- skills/security-scan/scripts/scan_vulnerabilities.py
Every link opens the file at its source, pinned to the revision this page describes.