security-before-push
Automated security scanning for secrets and credentials before git pushes.
Install
mkdir -p .claude/skills/security-before-push && curl -L -o skill.zip "https://agentskills.codes/api/skills/download/15632" && unzip -o skill.zip -d .claude/skills/security-before-push && rm skill.zipInstalls to .claude/skills/security-before-push
Activation
This is the description your AI agent reads to decide when to run this skill — the better it matches your request, the more reliably it fires.
Use before commit, push, or PR to check secrets, generated junk, unsafe permissions, logging leaks, and durable instruction changes.Key capabilities
- →Scan for credentials, tokens, and private keys in changed files
- →Check for sensitive values in logs and debug output
- →Review GitHub Actions workflows for permission expansion
- →Examine agent instructions and prompt files for changes
- →Review dependency, entitlement, signing, and network permission changes
How it works
The skill executes a script and reviews changed files to identify security vulnerabilities like exposed secrets or broadened permissions. It then reports any blocking issues.
Inputs & outputs
When to use security-before-push
- →Scanning for secrets before push
- →Auditing CI/CD permissions
- →Checking for hardcoded credentials
- →Validating agent instructions
About security-before-push
Scans for sensitive tokens, environment keys, and risky CI/CD configuration changes. Prevents insecure code from being committed to the repository.
Use before commit, push, or PR to check secrets, generated junk, unsafe permissions, logging leaks, and durable instruction changes.
When not to use it
- →When the user wants to commit, push, or create a pull request without prior security checks
Limitations
- →Secret detected.
- →Real credential printed or logged.
- →CI permission broadened without approval.
How it compares
This skill automates security checks before code changes are integrated, preventing insecure code from entering the repository, unlike manual review after a commit.
Compared to similar skills
security-before-push side by side with the closest alternatives in the catalog.
| Skill | Installs | Updated | Safety | Difficulty |
|---|---|---|---|---|
| security-before-push (this skill) | 0 | 2mo | No flags | Beginner |
| dependency-auditor | 1 | 9mo | Review | Beginner |
| repo-security-posture | 0 | 2mo | Review | Advanced |
| ship-safe | 0 | 1mo | Review | Beginner |
Try saying
Example prompts that trigger this skill in your AI assistant.
You might also like
dependency-auditor
alirezarezvani
Check dependencies for known vulnerabilities using npm audit, pip-audit, etc. Use when package.json or requirements.txt changes, or before deployments. Alerts on vulnerable dependencies. Triggers on dependency file changes, deployment prep, security mentions.
repo-security-posture
superagent-ai
Audit a GitHub repository's security posture and hardening gaps across branch protection, CODEOWNERS, GitHub Actions, publish/release integrity, collaborator access, security features, and dependency review. Use when reviewing or hardening a repo, assessing GitHub configuration, checking CI/CD or Ac
ship-safe
kinncj
Run ship-safe security and quality audit on the current project. Executes npx ship-safe audit . and reports findings by severity. Use before shipping any feature or PR.
ai-security
arcasilesgroup
Runs security gates: SAST with OWASP/CWE mapping, dependency vulnerability scans, secret detection, SBOM generation for compliance, pre-release security verdict. Trigger for 'is this secure', 'audit dependencies', 'check for secrets', 'security report', 'is this package safe', 'compliance review'. N
go-vuln-remediate
infobloxopen
Run Wiz-based vulnerability scan and automatic Go module remediation for containerized Go services in the konk repository. Use when you need to build images, scan CVEs, patch vulnerable dependencies in go.mod/go.sum across konk-service and konk-provision modules, validate builds, and prepare a PR su
security-compliance
RicherTunes
Establish comprehensive security scanning and compliance infrastructure from scratch. Use when working with security audits, vulnerability scanning, secret detection, CodeQL, Dependabot, or security hardening. Critical priority for Qobuzarr.