Can this skill handle secret management?

Yes, it includes specialized workflows for encrypting secrets and validating that no sensitive keys or credentials are leaked into the source code.

What security tools does this skill support?

The skill integrates with industry-standard tools including Bandit, Semgrep, pip-audit, safety, and gitleaks for comprehensive vulnerability detection.

Does it validate my local development environment?

Absolutely. It can verify your GPG and SSH key configurations to ensure that your commits are properly signed and your connection to remote repositories is secure.

How does it help with OWASP compliance?

It provides a dedicated checklist and specific guidance for addressing the OWASP Top 10, covering areas like injection, broken access control, and sensitive data exposure.

Security & Compliance Suite

Name: Security & Compliance Suite
Author: ByronWilliamsCPA

byByronWilliamsCPA

安全与测试

Secures software projects by automating vulnerability scanning, environment validation, and OWASP compliance auditing.

关于

The Security Suite skill provides a comprehensive toolkit for identifying vulnerabilities, managing secrets, and ensuring adherence to security best practices within your development workflow. It automates critical tasks such as GPG/SSH key validation, dependency auditing via pip-audit, and static code analysis using Bandit and Semgrep, enabling developers to maintain a robust security posture and prevent sensitive data leaks before deployment.

主要功能

Dependency vulnerability scanning using pip-audit and safety
Automated static analysis with Bandit and Semgrep
Secret management and encryption workflow integration
Environment validation for GPG/SSH keys and git signing
0 GitHub stars
Standardized OWASP Top 10 compliance checklists

使用场景

Verifying developer environment configurations and secure git signing
Scanning third-party dependencies for known CVEs before production releases
Performing comprehensive pre-commit security audits to prevent secret leakage

关于

主要功能

Dependency vulnerability scanning using pip-audit and safety
Automated static analysis with Bandit and Semgrep
Secret management and encryption workflow integration
Environment validation for GPG/SSH keys and git signing
0 GitHub stars
Standardized OWASP Top 10 compliance checklists

使用场景

Verifying developer environment configurations and secure git signing
Scanning third-party dependencies for known CVEs before production releases
Performing comprehensive pre-commit security audits to prevent secret leakage