security-check

Stars14

Forks2

UpdatedMay 8, 2026 at 06:40

Scan Python projects for credential leaks, secrets in code, insecure patterns, LLM API key exposure, PII leakage to external AI services, and .env/.gitignore misconfigurations. Focused on data science pipelines handling API keys, tokens, and LLM integrations.

Installation

Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.

Source

Benkapner

Benkapner/claude-code-basecamp

View GitHub Repository View Creator Repositories

Download

Related occupationsSOC

Based on SOC occupation classification

Information Security AnalystsComputer and Mathematical Occupations·SOC 15-1212

File Explorer

4 files

SKILL.md

readonly

name	security-check
version	1.0
description	Scan Python projects for credential leaks, secrets in code, insecure patterns, LLM API key exposure, PII leakage to external AI services, and .env/.gitignore misconfigurations. Focused on data science pipelines handling API keys, tokens, and LLM integrations.

Security Check Skill

Scan for credential leaks, insecure code patterns, and LLM security issues in Python data science projects.

When to Activate

Before committing changes
After modifying .env, .gitignore, or config files
When adding new API integrations or credentials
When reviewing code that handles tokens, keys, or passwords
When code sends data to external LLM APIs (Gemini, OpenAI, etc.)
Periodic security hygiene checks

Check Process

Read skills/scan-process.md for the full 6-step scan process with bash commands.

Pattern Reference

Read skills/pattern-tables.md for API key regex patterns, insecure Python code patterns, and LLM-specific security patterns with severity classifications.

Behavioral Rules

Read guidelines.md for severity classifications, remediation requirements, and escalation rules.

More from this repository

same repository

good-skill

Benkapner/claude-code-basecamp

Use when writing Python error handling code. Provides specific rules for exception chaining and custom error hierarchies.

2026-06-0314

security-skill

Benkapner/claude-code-basecamp

Use when reviewing code for security issues.

2026-06-0314

update-docs

Benkapner/claude-code-basecamp

Use when implementing features, fixing bugs, or refactoring code that may invalidate existing docs. Detects stale documentation by matching the code diff against in-repo doc files and applies targeted updates. Relevant when code changes rename, remove, or add APIs, fields, config keys, or CLI flags. Also applies when the user says "update docs", "check docs", or "are the docs stale", or when reviewing a branch for documentation accuracy.

2026-05-2814

clean-code-guide

Benkapner/claude-code-basecamp

Helps you write better Python code by following clean code principles and software engineering best practices.

2026-05-2014

verification-loop

Benkapner/claude-code-basecamp

Unified verification engine for Python data science projects. Covers environment checks, type checking, linting, tests, security scans, code review with DS anti-patterns, and notebook checks. Commands (/verify, /quality-gate) invoke different subsets of this skill.

2026-05-2014

brainstorming

Benkapner/claude-code-basecamp

Use when the user asks to design, plan, or explore approaches before implementing — creating features, building components, or adding functionality that would benefit from design exploration first.

2026-05-0814

name	security-check
version	1.0
description	Scan Python projects for credential leaks, secrets in code, insecure patterns, LLM API key exposure, PII leakage to external AI services, and .env/.gitignore misconfigurations. Focused on data science pipelines handling API keys, tokens, and LLM integrations.

Security Check Skill

Scan for credential leaks, insecure code patterns, and LLM security issues in Python data science projects.

When to Activate

Before committing changes
After modifying .env, .gitignore, or config files
When adding new API integrations or credentials
When reviewing code that handles tokens, keys, or passwords
When code sends data to external LLM APIs (Gemini, OpenAI, etc.)
Periodic security hygiene checks

Check Process

Read skills/scan-process.md for the full 6-step scan process with bash commands.

Pattern Reference

Read skills/pattern-tables.md for API key regex patterns, insecure Python code patterns, and LLM-specific security patterns with severity classifications.

Behavioral Rules

Read guidelines.md for severity classifications, remediation requirements, and escalation rules.