security-scan
The security-scan command performs local vulnerability and secret detection using gitleaks and safety tools, then triggers a remote GitHub Actions security audit workflow. Use this before pushing code to verify dependencies are free of known vulnerabilities and no credentials are accidentally committed to version control.
mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/alirezarezvani/claude-code-skill-factory/HEAD/.claude/commands/security-scan.md -o ~/.claude/commands/security-scan.mdsecurity-scan.md
## Local Scan
1. Install tooling (first run): `pip install safety==3.2.4` and `brew install gitleaks` (or `go install github.com/zricethezav/gitleaks/v8@latest`).
2. Detect secrets: `gitleaks detect --verbose --redact`
3. Dependency audit (if `requirements*.txt` exists):
```bash
for f in $(ls **/requirements*.txt 2>/dev/null); do
safety check --full-report --file "$f"
done
```
4. Document results in the commit template.
## Trigger Remote Audit
```bash
gh workflow run security-audit.yml --ref $(git branch --show-current)
gh run watch --workflow "Security Audit (Claude)"
```
## Completion
- Ensure both local and remote scans are clean before pushing or merging.Claude Code agent generation system that creates custom agents and sub-agents with enhanced YAML frontmatter, tool access patterns, and MCP integration support following proven production patterns
Interactive guide for building custom Claude Code Agents and subagents. Asks straightforward questions, generates enhanced YAML frontmatter with tools/model/color/field/expertise, creates agent .md files, validates format, and helps install to .claude/agents/ or ~/.claude/agents/. Use when user wants to build workflow specialist agents.
Complete App Store Optimization (ASO) toolkit for researching, optimizing, and tracking mobile app performance on Apple App Store and Google Play Store
Expert AWS solution architecture for startups focusing on serverless, scalable, and cost-effective cloud infrastructure with modern DevOps practices and infrastructure-as-code
Trigger the Commit & Branch Guard workflow on demand.
Analyzes, generates, and enhances CLAUDE.md files for any project type using best practices, modular architecture support, and tech stack customization. Use when setting up new projects, improving existing CLAUDE.md files, or establishing AI-assisted development standards.
Stage working tree changes and create a Conventional Commit (no push).
Bridge between Claude Code and OpenAI Codex CLI - generates AGENTS.md from CLAUDE.md, provides Codex CLI execution helpers, and enables seamless interoperability between both tools