ln-760-security-setup

Solid

Sets up security scanning for secrets and dependency vulnerabilities. Use when adding security infrastructure to a project.

AI & Automation 479 stars 67 forks Updated yesterday MIT

Install

View on GitHub

Quality Score: 94/100

Stars 20%
89
Recency 20%
100
Frontmatter 20%
70
Documentation 15%
100
Issue Health 10%
50
License 10%
100
Description 5%
100

Skill Content

> **Paths:** File paths (`shared/`, `references/`, `../ln-*`) are relative to skills repo root. If not found at CWD, locate this SKILL.md directory and go up one level for repo root. If `shared/` is missing, fetch files via WebFetch from `https://raw.githubusercontent.com/levnikolaevich/claude-code-skills/master/skills/{path}`. # Security Setup Coordinator **Type:** L2 Domain Coordinator **Category:** 7XX Bootstrap ## Purpose & Scope - Coordinate secret scanning (ln-761) and dependency vulnerability audit (ln-625) - Aggregate findings from both workers into unified report - Generate security infrastructure: SECURITY.md, pre-commit hooks, CI workflow - Provide overall security score and risk assessment ## When to Use - During project bootstrap (invoked by ln-700-project-bootstrap) - Manual security audit request - CI/CD pipeline initialization --- ## Workflow ### Phase 1: Pre-flight Check **Step 1: Detect Project Type** - Identify primary ecosystem(s): Node.js, .NET, Python, Go, etc. - Check for existing security configs (`.gitleaks.toml`, `SECURITY.md`) **Step 2: Check Tool Availability** - Verify gitleaks/trufflehog available for secret scanning - Verify ecosystem-specific audit tools available - Log warnings for missing tools (do not fail) **Step 3: Load Existing Configs** - If `.gitleaks.toml` exists: note for preservation - If `SECURITY.md` exists: note for update (not overwrite) - If `.pre-commit-config.yaml` exists: check for gitleaks hook ### Phase 2: Dele...

Details

Author
levnikolaevich
Repository
levnikolaevich/claude-code-skills
Created
7 months ago
Last Updated
yesterday
Language
JavaScript
License
MIT

Integrates with

Similar Skills

Semantically similar based on skill content — not just same category