skills.rest
Josue7211
Josue7211COMMUNITY
Explore all skills by this author →
Website𝕏@aapjosueGitHub

security-sweep

Detect exploitable security weaknesses in application code and infrastructure configurations.

Updated Mar 17, 2026
Search Tags:#owasp#code-review#security-audit#dependency-audit#infrastructure-scanning#ssh-validation#exploit-poe
One-click install
npx skills add https://github.com/Josue7211/security-sweep --skill security-sweep
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-sweep
Source: https://github.com/Josue7211/security-sweep/tree/main
Command: npx skills add https://github.com/Josue7211/security-sweep --skill security-sweep

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It identifies security weaknesses across your codebase and infrastructure before attackers can exploit them, producing evidence-backed findings with remediation guidance.

Core Features & Use Cases

  • Auto-detects project type and mode: scans app, infrastructure, or hybrid by looking at your repository structure.
  • Produces exploit-ready results: assigns confidence scores, detects attack chains, and requires exploit PoCs for HIGH+ severity.
  • Validates real posture and blast radius: for infrastructure changes, it verifies live SSH state and assesses what breaks if exploited.
  • Tracks and improves over time: saves results for baseline diffing and supports regression-tested auto-fixes for CRITICAL/HIGH issues.

Quick Start

Run the full audit by telling your AI to execute /security-sweep for a pentest-grade security review of your repository.

Frequently Asked Questions about security-sweep

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security audit on my repository to find exploitable code weaknesses?▼

A security sweep identifies exploitable weaknesses in application code and infrastructure by running mode-specific red-team scanning. It checks for auth flaws, database RLS issues, prompt injection, SSRF, and dependency vulnerabilities.

Can I validate live infrastructure posture and blast radius during a security scan?▼

Yes, live infrastructure posture and blast radius can be validated via SSH during a security scan. The tool verifies the real SSH state and assesses what systems would break if a detected vulnerability were actually exploited.

Does the security audit generate exploit proof-of-concept code for vulnerabilities?▼

Yes, the security audit requires exploit proof-of-concept demonstrations for any HIGH+ severity findings. It produces confidence-scored results, detects attack chains, and assesses blast radius to ensure vulnerabilities are exploitable.

How do I track remediation progress when fixing critical security findings?▼

You can track remediation progress using baseline diffing and regression-tested auto-fixes. The tool saves previous scan results to establish a security baseline, allowing you to diff new scans against it and verify that remediations worked.

What types of vulnerabilities can an automated code review and dependency audit detect?▼

An automated code review and dependency audit can detect authentication flaws, database row-level security misconfigurations, AI prompt injection, SSRF and network issues, and vulnerable dependencies across hybrid repositories.

Related Skills

Explore More Software Engineering Skills→
CodySwannGTCodySwannGT
3

security-zap-scan

Run OWASP ZAP baseline security scans locally with Docker.

Community
Intermediate
jmaglyjmagly
175

flaky-detect

Analyze CI history and test execution patterns to identify flaky tests.

Community
Advanced
drgaciwdrgaciw

sast-configuration

Configure Semgrep, SonarQube, and CodeQL for automated vulnerability detection.

Community
Intermediate
mahamaneharouna9-cpumahamaneharouna9-cpu

web-security-expert

Identify and test web application vulnerabilities including OWASP Top 10 risks.

Community
Intermediate