Slash Command260 repo starsupdated 16d ago

security-scan

The security-scan command performs pre-push security validation by checking for committed secrets using Gitleaks and auditing Python dependencies with Safety. Use this before pushing code to catch credential leaks and vulnerable packages in your project's requirements files.

View source Repository: Claude-Skills

Install in Claude Code

Copy

mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/borghei/Claude-Skills/HEAD/.claude/commands/security-scan.md -o ~/.claude/commands/security-scan.md

Then start a new Claude Code session; the slash command loads automatically.

Definition

security-scan.md

1. Ensure dependencies are installed:
   ```bash
   pip install safety==3.2.4
   brew install gitleaks  # or appropriate package manager
   ```
2. Scan for committed secrets:
   ```bash
   gitleaks detect --verbose --redact
   ```
   - Resolve any findings before continuing.
3. Audit Python dependencies (if requirements files exist):
   ```bash
   for f in $(find . -name "requirements*.txt" 2>/dev/null); do
       safety check --full-report --file "$f"
   done
   ```
4. Record results in the commit template's Testing section.
5. After a clean pass, proceed with commit and push workflow.