security
This skill configures GitLeaks within Husky pre-commit hooks to catch secrets before they're committed, then runs a security audit on your code. It can optionally scan git history for previously leaked secrets and provides remediation guidance.
security skill sets up GitLeaks in Husky pre-commit hooks to automatically detect secrets before code commits.
AI-generated summary based on this skill's SKILL.md
Decision gist · record as of 2026-05-18
security skill sets up GitLeaks in Husky pre-commit hooks to automatically detect secrets before code commits. This skill configures GitLeaks within Husky pre-commit hooks to catch secrets before they're committed, then runs a security audit on your code. It can optionally scan git history for previously leaked secrets and provides remediation guidance.
Use it when
- Security runs a comprehensive audit on your codebase that scans for vulnerabilities and security issues.
- Yes.
Verify before relying
Read SKILL.md below before installing (1 file). Open directory: indexed for reading, not audited.
Similar skills
Install
ruchernchong/claude-kit/security · repository language: TypeScript
Open directory. Skills are indexed for reading, not audited. Review a skill's body before installing it.
Frequently asked questions
AI-generated answers based on this skill's SKILL.md and metadata
How do I setup gitleaks pre-commit hook with security?
Security configures GitLeaks within Husky pre-commit hooks to automatically detect secrets before they're committed to your repository. The skill sets up the necessary hook configuration and enables GitLeaks to scan staged files for credential patterns, API keys, and other sensitive data during the commit process.
What does security's code audit include?
Security runs a comprehensive audit on your codebase that scans for vulnerabilities and security issues. The audit leverages GitLeaks for secret detection and can optionally analyze your code against OWASP Top 10 standards, providing detailed findings and remediation guidance for identified vulnerabilities.
Can security detect secrets in git history?
Yes. Security can scan your entire git history for previously leaked credentials and secrets. This historical scan helps identify sensitive data that may have been accidentally committed in the past, allowing you to take remediation steps before those secrets are exploited.
How does security integrate with Husky hooks?
Security configures Husky pre-commit hooks to enforce security compliance automatically. By integrating GitLeaks through Husky, the skill ensures that every commit is checked for secrets and vulnerabilities before it reaches your repository, creating a seamless automated security workflow.
What security standards does security check against?
Security can analyze your code against OWASP Top 10 standards as part of its vulnerability assessment. This optional analysis helps identify common web application security risks and provides guidance aligned with industry-recognized security best practices.
SKILL.md
Rendered from the published skill. Quoted content, verbatim.
You are a security engineer setting up GitLeaks and running security audits.
Workflow
1. Setup GitLeaks in Husky Pre-commit Hook
Check if GitLeaks is configured in the project's pre-commit hook. If not, set it up.
Detection Steps
- Check if
.husky/directory exists - Check if
.husky/pre-commitcontainsgitleaks
Setup Steps (if GitLeaks is missing)
If .husky/ does not exist:
npx husky init
Add GitLeaks to .husky/pre-commit BEFORE any lint-staged command:
gitleaks protect --staged --verbose
Example .husky/pre-commit with lint-staged:
#!/usr/bin/env sh
. "$(dirname -- "$0")/_/husky.sh"
# Secrets detection - fail fast if secrets found
gitleaks protect --staged --verbose
# Lint staged files
npx lint-staged
If the pre-commit file already exists, insert the gitleaks line before npx lint-staged.
2. Code Security Audit
After ensuring GitLeaks is configured, spawn the security-auditor agent to analyze code:
``` Use the Task tool with
(truncated - see the full file via the links below)
File tree — 1 file
skills/security/SKILL.md
Let your AI agent find skills like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 56,283 agent skills by what they can do, searchable in plain language.
wish › “Set up GitLeaks pre-commit hook for automated secret detection”
Give your agent the search over MCP, or paste the wish link into any chat. No install? Search from any chat →
Related skills
setup identifies your project's language and installs the appropriate toolchain for that ecosystem—Biome and Husky for JS/TS, Ruff and pre-commit for Python, golangci-lint for Go, or Clippy for Rust. It skips tools already configured and wires in secret scanning across all languages. After installation, you can verify everything works with a test commit.
Fix Schema resolves session log validation failures by updating Zod schemas to handle new data formats without breaking existing JSONL files. It guides you through locating the relevant schema, updating type definitions, adding tests, and creating a pull request with all changes verified.
This skill teaches you to recognize and defend against the OWASP Top 10 security vulnerabilities that threaten modern applications. Through practical guidance on threat identification and mitigation strategies, you'll build the defensive coding practices needed to protect your software from common attacks and exploits.
This skill equips developers with essential security practices for npm-based projects, covering dependency vetting, vulnerability detection, and safe package management workflows. Gain actionable guidance on hardening your supply chain and mitigating common risks in the Node.js ecosystem.
This skill orchestrates complete release pipelines using AI swarms to manage versioning, automated testing, multi-platform builds, and deployments with rollback support. It handles changelog generation, breaking change detection, and progressive deployment strategies while coordinating specialized agents for version management, QA, and deployment tasks.
This skill automates the process of updating project dependencies while prioritizing security against supply chain threats. It integrates seamlessly with Claude Code CLI to manage package upgrades safely and efficiently.
More skills Github Agile (unlicensed)