What languages does the Verify skill support?

The skill supports a wide range of popular languages including TypeScript, JavaScript, Python, C/C++, Rust, Go, Java, and Ruby.

Why is it recommended to run verify before every commit?

Research indicates approximately 40% of LLM-generated code contains security vulnerabilities. The 'ubs --staged' command acts as a mandatory gate to catch these issues before they are committed.

Can I use this skill in my CI/CD pipeline?

Yes, the Verify skill includes a dedicated CI mode and supports standard output formats like SARIF for integration with GitHub Code Scanning and other CI tools.

How do I handle false positives in the scanner?

You can suppress specific lines by adding a '// ubs:ignore' comment, though this should be used sparingly to ensure the integrity of the security audit.

What happens if the scanner finds a critical issue?

Critical and High issues must be fixed immediately and will block the commit process. The workflow allows for up to 3 iterations of automated fixes before requiring manual escalation.

Verify Security & Bug Scanner

Name: Verify Security & Bug Scanner
Author: Mburdo

byMburdo

•

Security & Testing

Scans code for over 1000 bug patterns and security vulnerabilities using the Ultimate Bug Scanner (UBS) to ensure production-grade safety.

The Verify skill integrates the Ultimate Bug Scanner (UBS) directly into the Claude Code environment, providing a mandatory security gate to catch vulnerabilities before they reach your repository. It analyzes staged changes, specific files, or entire directories across a wide range of programming languages, offering strict enforcement profiles and CI-ready output formats like SARIF and JSON. By automating security audits within the development workflow, it helps developers mitigate the inherent risks of AI-generated code while maintaining high standards for code quality and reliability.

Key Features

01Automated scanning for 1000+ bug patterns across major programming languages

0246 GitHub stars

03Customizable scanning profiles including 'strict' for production and 'loose' for prototyping

04Comprehensive language support for Python, TypeScript, Rust, Go, Java, and C++

05Mandatory pre-commit gate for staged changes to prevent vulnerability leaks

06Direct integration with CI/CD pipelines via SARIF and JSON output formats

Use Cases

01Integrating automated static analysis into professional development workflows

02Identifying and fixing vulnerabilities in AI-generated code iterations

03Performing mandatory security audits on staged changes before git commits

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add mburdo/knowledge_and_vibes verify

For use in Claude.ai and ChatGPT

Download Skill