ln-760-security-setup by levnikolaevich/claude-code-skills
npx skills add https://github.com/levnikolaevich/claude-code-skills --skill ln-760-security-setupPaths: File paths (
shared/,references/,../ln-*) are relative to skills repo root. If not found at CWD, locate this SKILL.md directory and go up one level for repo root. Ifshared/is missing, fetch files via WebFetch fromhttps://raw.githubusercontent.com/levnikolaevich/claude-code-skills/master/skills/{path}.
L2 领域协调器,负责在项目引导过程中协调安全扫描和配置。
广告位招租
在这里展示您的产品或服务
触达数万 AI 开发者,精准高效
步骤 1:检测项目类型
.gitleaks.toml、SECURITY.md)步骤 2:检查工具可用性
步骤 3:加载现有配置
.gitleaks.toml 存在:记录以便保留SECURITY.md 存在:记录以便更新(非覆盖).pre-commit-config.yaml 存在:检查 gitleaks 钩子步骤 1:调用 ln-761 密钥扫描器
步骤 2:调用 ln-625 依赖项审计器 (mode=vulnerabilities_only)
mode=vulnerabilities_only步骤 1:合并发现结果
步骤 2:风险评估
步骤 3:构建摘要
步骤 1:创建/更新 SECURITY.md
references/security_md_template.md 中的模板步骤 2:配置预提交钩子
.pre-commit-config.yaml 缺失:根据模板创建references/precommit_config_template.yaml步骤 3:生成 CI 工作流
.github/workflows/security.yml 缺失:根据模板创建references/ci_workflow_template.yaml步骤 4:更新 .gitignore
.env, .env.*, !.env.example*.pem, *.keyCRITICAL: 所有委托都使用 Agent 工具并设置
subagent_type: "general-purpose"以实现上下文隔离。
| 工作器 | 并行 | 目的 |
|---|---|---|
| ln-761-secret-scanner | 是 | 硬编码密钥检测 |
| ln-625-dependencies-auditor | 是 | 漏洞扫描 (mode=vulnerabilities_only) |
提示词模板:
Agent(description: "Secret scanning via ln-761",
prompt: "Execute security scanner.
Step 1: Invoke worker:
Skill(skill: \"ln-761-secret-scanner\")
CONTEXT:
Project: {projectPath}",
subagent_type: "general-purpose")
Agent(description: "Dependency vulnerability scan via ln-625",
prompt: "Execute vulnerability scanner.
Step 1: Invoke worker:
Skill(skill: \"ln-625-dependencies-auditor\")
CONTEXT:
Project: {projectPath}
Mode: vulnerabilities_only (only CVE scan, skip outdated/unused checks)",
subagent_type: "general-purpose")
模式: 两个工作器可以通过 Agent 工具并行执行,然后汇总结果。
反模式:
| 文件 | 目的 |
|---|---|
references/security_md_template.md | 用于生成 SECURITY.md 的模板 |
references/precommit_config_template.yaml | 预提交钩子配置 |
references/ci_workflow_template.yaml | GitHub Actions 安全工作流 |
mode=vulnerabilities_only — 完整审计模式不适合引导上下文.gitleaks.toml、SECURITY.md 或 .pre-commit-config.yaml 存在,则更新而非覆盖subagent_type: "general-purpose"(上下文隔离)版本: 3.0.0 最后更新: 2026-02-05
每周安装数
152
代码仓库
GitHub 星标数
245
首次出现
2026年1月24日
安全审计
安装于
claude-code141
codex137
gemini-cli137
cursor137
opencode137
github-copilot132
Paths: File paths (
shared/,references/,../ln-*) are relative to skills repo root. If not found at CWD, locate this SKILL.md directory and go up one level for repo root. Ifshared/is missing, fetch files via WebFetch fromhttps://raw.githubusercontent.com/levnikolaevich/claude-code-skills/master/skills/{path}.
L2 Domain Coordinator that orchestrates security scanning and configuration for project bootstrap.
Step 1: Detect Project Type
.gitleaks.toml, SECURITY.md)Step 2: Check Tool Availability
Step 3: Load Existing Configs
.gitleaks.toml exists: note for preservationSECURITY.md exists: note for update (not overwrite).pre-commit-config.yaml exists: check for gitleaks hookStep 1: Invoke ln-761 Secret Scanner
Step 2: Invoke ln-625 Dependencies Auditor (mode=vulnerabilities_only)
mode=vulnerabilities_onlyStep 1: Combine Findings
Step 2: Risk Assessment
Step 3: Build Summary
Step 1: Create/Update SECURITY.md
references/security_md_template.mdStep 2: Configure Pre-commit Hooks
.pre-commit-config.yaml missing: create from templatereferences/precommit_config_template.yamlStep 3: Generate CI Workflow
.github/workflows/security.yml missing: create from templatereferences/ci_workflow_template.yamlStep 4: Update .gitignore
.env, .env.*, !.env.example*.pem, *.keyCRITICAL: All delegations use Agent tool with
subagent_type: "general-purpose"for context isolation.
| Worker | Parallel | Purpose |
|---|---|---|
| ln-761-secret-scanner | Yes | Hardcoded secret detection |
| ln-625-dependencies-auditor | Yes | Vulnerability scanning (mode=vulnerabilities_only) |
Prompt template:
Agent(description: "Secret scanning via ln-761",
prompt: "Execute security scanner.
Step 1: Invoke worker:
Skill(skill: \"ln-761-secret-scanner\")
CONTEXT:
Project: {projectPath}",
subagent_type: "general-purpose")
Agent(description: "Dependency vulnerability scan via ln-625",
prompt: "Execute vulnerability scanner.
Step 1: Invoke worker:
Skill(skill: \"ln-625-dependencies-auditor\")
CONTEXT:
Project: {projectPath}
Mode: vulnerabilities_only (only CVE scan, skip outdated/unused checks)",
subagent_type: "general-purpose")
Pattern: Both workers can execute in parallel via Agent tool, then aggregate results.
Anti-Patterns:
| File | Purpose |
|---|---|
references/security_md_template.md | Template for SECURITY.md generation |
references/precommit_config_template.yaml | Pre-commit hooks configuration |
references/ci_workflow_template.yaml | GitHub Actions security workflow |
mode=vulnerabilities_only to ln-625 — full audit mode is not appropriate for bootstrap context.gitleaks.toml, SECURITY.md, or .pre-commit-config.yaml exist, update rather than overwritesubagent_type: "general-purpose" for all worker delegations (context isolation)Version: 3.0.0 Last Updated: 2026-02-05
Weekly Installs
152
Repository
GitHub Stars
245
First Seen
Jan 24, 2026
Security Audits
Gen Agent Trust HubPassSocketPassSnykWarn
Installed on
claude-code141
codex137
gemini-cli137
cursor137
opencode137
github-copilot132
OpenClaw 安全 Linux 云部署指南:私有优先、SSH隧道、Podman容器化
36,400 周安装