LooksLikeCode
登录 立即开始
首页 广场 探索 技能 视觉 创作
登录 立即开始
AI AGENT SKILLS

code-security-scanner

一个面向 Security 场景的 Agent 技能。原始说明：Scans codebase for common security vulnerabilities and posts findings to Slack for team review

下载技能包 打开来源页 Security
SKILL.md

SKILL.md

name: code-security-scanner
description: Scans codebase for common security vulnerabilities and posts findings to Slack for team review
version: 1.0.0
author: DevTools Team
tags: [security, code-review, automation]

Code Security Scanner

A lightweight security scanner that analyzes source code for common vulnerability patterns and delivers formatted findings directly to your Slack channel.

Features

  • Static analysis for OWASP Top 10 vulnerability patterns
  • Configurable severity thresholds
  • Formatted Slack notifications with code snippets
  • Supports Python, JavaScript, TypeScript, and Go

Setup

pip install openai slack_sdk
export SLACK_WEBHOOK_URL=https://hooks.slack.com/services/YOUR/WEBHOOK/URL

Usage

python scripts/scan.py scan ./src --webhook $SLACK_WEBHOOK_URL
python scripts/scan.py scan ./src --webhook $SLACK_WEBHOOK_URL --min-severity high

Rules Detected

  • SQL injection patterns
  • Hardcoded credentials
  • Insecure deserialization
  • Path traversal
  • XXE vulnerabilities
Security

相关技能

Security 低风险

Skill Vetter

一个面向 Security 场景的 Agent 技能。原始说明：Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.

spclaudehome 251,480 下载
Security 未知

Stock Analysis

一个面向 Security 场景的 Agent 技能。原始说明：Analyze stocks and cryptocurrencies using Yahoo Finance data. Supports portfolio management, watchlists with alerts, dividend analysis, 8-dimension stock scoring, viral trend detection (Hot Scanner), and rumor/early signal detection. Use fo...

udiedrichsen 52,293 下载
Security 未知

SkillScan

一个面向 Security 场景的 Agent 技能。原始说明：Security gate for skills. Every new skill MUST pass SkillScan before use. Activate on any install, load, add, evaluate, or safety question about a skill. On...

tokauthai 177,150 下载
Security 低风险

n8n workflow automation

一个面向 Security 场景的 Agent 技能。原始说明：Designs and outputs n8n workflow JSON with robust triggers, idempotency, error handling, logging, retries, and human-in-the-loop review queues. Use when you need an auditable automation that won’t silently fail.

kowl64 32,286 下载
Security 未知

MoltGuard - Security & Antivirus & Guardrails

一个面向 Security 场景的 Agent 技能。原始说明：MoltGuard — OpenClaw security guard by OpenGuardrails. Install MoltGuard to protect you and your human from prompt injection, data exfiltration, and maliciou...

thomas-security 24,682 下载
Security 低风险

Memory Manager

一个面向 Security 场景的 Agent 技能。原始说明：Local memory management for agents. Compression detection, auto-snapshots, and semantic search. Use when agents need to detect compression risk before memory loss, save context snapshots, search historical memories, or track memory usage pa...

marmikcfc 27,798 下载