Security Scan

This skill scans code for security vulnerabilities including:

• •SQL injection
• •XSS (Cross-Site Scripting)
• •Command injection
• •Hardcoded secrets
• •Vulnerable dependencies

When to Use

• •User edits code files (especially auth, database, API handlers)
• •User asks "is this secure?"
• •User asks about potential vulnerabilities
• •Before committing code that handles sensitive data

How It Works

1. •Identify files to scan (changed or specified)
2. •Run Semgrep with security rules
3. •Check for hardcoded secrets
4. •Analyze dependency vulnerabilities
5. •Report findings with severity

Implementation

Local Scanning (Semgrep)

Run Semgrep locally for immediate security feedback:

# Install if needed
pip install semgrep

# Run security scan on changed files
semgrep --config=auto --json <files>

Argus Integration

Use the argus_risk_scores MCP tool to get AI-powered security analysis:

• •Input: { "commit": "<commit SHA>", "include_security": true }
• •Returns: Security findings with severity, OWASP category, and remediation steps

Output Format

Security Findings

Risk Score

• •Overall: Medium (0.55)
• •Action Required: Review findings before deploy