Security Audit and Vulnerability Scanning

What problem does it solve?

This Skill automates comprehensive security audits and vulnerability scanning, identifying weaknesses in dependencies, unsafe code, and leaked secrets. It helps maintain a secure codebase and prevents critical vulnerabilities from reaching production.

Core Features & Use Cases

• Dependency Vulnerability Scanning: Integrates cargo-audit and cargo-deny to check for known CVEs and enforce security policies.
• Unsafe Code Detection: Uses cargo-geiger to identify and quantify unsafe code blocks, aiding in risk assessment.
• Secret Management: Employs gitleaks to detect accidentally committed secrets (API keys, tokens) in your repository history.
• Use Case: Before a major production deployment, activate this Skill to perform a full security audit. It will scan your dependencies for CVEs, check for policy violations, detect unsafe Rust code, and ensure no sensitive secrets have been committed, providing a comprehensive security report.

Quick Start

Run a full security audit on the current project, including dependency checks and secret detection.