commit-security

Scan commits for security risks and hardcoded secrets with CWE mapping.

Updated Aug 27, 2026
One-click install
npx skills add https://github.com/ferundatattoo/ethereal --skill commit-security
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: commit-security
Source: https://github.com/ferundatattoo/ethereal/tree/main/.claude/skills/commit-security
Command: npx skills add https://github.com/ferundatattoo/ethereal --skill commit-security

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Pre-commit security scanning helps prevent leaking secrets and introducing vulnerabilities by enforcing checks before code is committed.

Core Features & Use Cases

  • Hardcoded secrets detection and CWE mapping to categorize findings.
  • Detection of SQL injection, XSS, and authentication bypass patterns.
  • Automatic blocking of CRITICAL findings and warnings for HIGH/MEDIUM with clear remediation guidance.

Quick Start

Configure your repository to run the pre-commit hook that executes this security scan on every commit.

Frequently Asked Questions about commit-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enforce pre-commit security checks to prevent hardcoded secrets in git commits?▼

Pre-commit security scanning prevents leaking secrets by configuring your repository to run a pre-commit hook that detects hardcoded secrets and blocks commits containing critical findings.

What is CWE mapping when scanning code for vulnerabilities like SQL injection and XSS?▼

CWE mapping categorizes detected security risks, such as SQL injection, XSS vectors, and authentication bypass attempts, by mapping the findings to standardized CWE categories for clear remediation.

How do I stop a git commit automatically if critical security vulnerabilities are detected?▼

To stop a git commit, configure a pre-commit hook to execute a security scan; it will automatically block commits with CRITICAL findings and issue warnings for HIGH and MEDIUM severity risks.

Can I use pre-commit hooks to detect authentication bypass patterns in any code repository?▼

Yes, pre-commit hooks can detect authentication bypass patterns in any code repository by executing security scans on every commit, ensuring vulnerabilities are caught before introduction.

Does pre-commit vulnerability detection provide guidance for fixing HIGH and MEDIUM security warnings?▼

Pre-commit vulnerability detection provides clear remediation guidance for HIGH and MEDIUM security warnings, allowing developers to understand and address detected risks without blocking the commit.