Scan codebases for secrets, dependencies, and OWASP threats.
npx skills add https://github.com/Epiphytic/brains --skill secure-epiphytic
Please help me install this Agent Skill. Skill: secure Source: https://github.com/Epiphytic/brains/tree/main/skills/secure Command: npx skills add https://github.com/Epiphytic/brains --skill secure-epiphytic
Secure provides a structured, repeatable process to find and remediate security issues in a codebase, including secrets, dependency vulnerabilities, insecure configurations, and design-level threats, reducing the risk of production compromise.
Run the secure skill to scan the repository for secrets, perform dependency and OWASP checks, generate a prioritized security report, and propose or commit remediation changes.
High-intent search queries and answers about installing and using this skill.
To scan your codebase for hardcoded secrets and dependency vulnerabilities, you can run a comprehensive security review that detects leaked keys, runs npm or pip audits for known CVEs, and generates a prioritized remediation report.
The best way to perform an OWASP Top 10 assessment is to check your source code and architecture against standard vulnerability categories, generate STRIDE-based threat models, and produce a committed security report under your docs directory.
Yes, you can use multi-LLM review modes for high-confidence threat modeling by configuring council-style parallel reviews or debate-style multi-round deliberation alongside standard local scans to validate security findings.
To audit npm, pip, Cargo, and Go dependencies for known CVEs, run a dependency audit workflow that surfaces vulnerable packages across your project ecosystems and prioritizes them in a structured remediation plan.
Threat modeling and secrets scanning work with both recent git diffs and the full source repository, allowing you to target specific code changes or perform a comprehensive standalone security review of the entire codebase.
projectedanxAudit source code repositories with a four-phase state machine for security vulnerabilities.
dcossonCompare plan docs against code and generate signoff reports.
tutran27Performs STRIDE and OWASP security audits on codebases with optional automated fixes.
EpiphyticReview and fix code implementations for correctness and test coverage.
