返回 Skill 列表
extension
分类: 开发与工程无需 API Key

security-quick-scan

扫描代码或配置以发现常见的安全问题。适用于中级开发人员需要快速进行安全检查时使用。

person作者: jakexiaohubgithub

Security Quick Scan

Purpose

Scan code or configuration for common security issues.

Inputs to request

  • Code or config diff.
  • Auth and data handling flow.
  • Threat model or risk level.

Workflow

  1. Check auth, input validation, and secret handling.
  2. Identify risky dependencies or outdated crypto.
  3. Recommend immediate fixes and follow-ups.

Output

  • Security findings with severity tags.

Quality bar

  • Prioritize issues by impact and likelihood.
  • Separate quick wins from larger remediations.