Skip to content

feat: add /security-check skill#279

Open
christinebuilds wants to merge 1 commit intogarrytan:mainfrom
christinebuilds:christinebuilds/security-check
Open

feat: add /security-check skill#279
christinebuilds wants to merge 1 commit intogarrytan:mainfrom
christinebuilds:christinebuilds/security-check

Conversation

@christinebuilds
Copy link

Summary

  • Adds a tiered security health check skill with three tiers: Just-in-Time (pre-push), Weekly, and Monthly
  • Scans for leaked secrets, vulnerable dependencies, stale credentials, file permissions, repo visibility, and OS security
  • Read-only by default — reports findings without modifying files
  • Includes optional scheduling templates for macOS launchd and Linux cron
  • Both SKILL.md and SKILL.md.tmpl included per gstack conventions

Context

Built as part of claude-burndown, a security-first command suite for autonomous Claude Code development. This skill has been in daily use for two weeks across multiple projects. Contributing it upstream so the broader gstack community can benefit.

More context: Claude-ing after dark? How to practice safe autonomous coding.

Test plan

  • Verify SKILL.md.tmpl generates correctly via bun run gen:skill-docs
  • Run bun test for skill validation
  • Test /security-check, /security-check quick, and /security-check monthly in a Claude Code session

🤖 Generated with Claude Code

Three-tier security audit skill for Claude Code:
- Just-in-Time: secret scan, dependency check, file permissions (pre-push)
- Weekly: git history scan, full dependency audit, background processes, repo visibility
- Monthly: OS security, credential rotation, stale software cleanup, GitHub access audit

Read-only by default — scans and reports, never modifies files.
Includes optional scheduling templates for macOS launchd and Linux cron.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant