Security scan
Scan code for security vulnerabilities using the SECURITY-CHECKLIST. Use when running 'security scan', 'vulnerability check', 'wheee vulns', or before deployment.From its SKILL.md
npx -y skills add skatekowski/wheee-plugin --skill security-scanAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
One thing to look at
- 1 stars1 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
SKILL.md
1.3 KB, as published. Nobody here has run it
Security Scan
Scan the project for security vulnerabilities against the SECURITY-CHECKLIST.
Process
- Read
references/SECURITY-CHECKLIST.md - Determine scope (changed files or full project)
- Check each of the 14 security sections:
- Input Validation & Sanitization
- Authentication & Authorization
- Session Management
- Data Protection
- API Security
- Error Handling & Logging
- Dependency Security
- File Operations
- Database Security
- Configuration Security
- Client-Side Security
- Infrastructure
- Business Logic
- Compliance
- For dependency vulnerabilities, run:
npm audit/pip audit/cargo auditas appropriate - Report all findings with severity ratings
Output Format
## Security Scan Report
### Critical Vulnerabilities
- [file:line] — [CVE/issue] — [remediation]
### High Risk
- [file:line] — [issue] — [remediation]
### Medium Risk
- [file:line] — [issue] — [suggestion]
### Dependency Audit
- X vulnerabilities found (Y critical, Z high)
### Verdict: SECURE / VULNERABILITIES FOUND