security-check

Étoiles14

Forks2

Mis à jour8 mai 2026 à 06:40

Scan Python projects for credential leaks, secrets in code, insecure patterns, LLM API key exposure, PII leakage to external AI services, and .env/.gitignore misconfigurations. Focused on data science pipelines handling API keys, tokens, and LLM integrations.

Installation

Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.

Source

Benkapner

Benkapner/claude-code-basecamp

Ouvrir le dépôt GitHub Voir les dépôts du créateur

Téléchargement

Métiers associésSOC

Basé sur la classification professionnelle SOC

Analystes en sécurité de l'informationProfessions informatiques et mathématiques·SOC 15-1212

Explorateur de fichiers

4 fichiers

SKILL.md

readonly

name	security-check
version	1.0
description	Scan Python projects for credential leaks, secrets in code, insecure patterns, LLM API key exposure, PII leakage to external AI services, and .env/.gitignore misconfigurations. Focused on data science pipelines handling API keys, tokens, and LLM integrations.

Security Check Skill

Scan for credential leaks, insecure code patterns, and LLM security issues in Python data science projects.

When to Activate

Before committing changes
After modifying .env, .gitignore, or config files
When adding new API integrations or credentials
When reviewing code that handles tokens, keys, or passwords
When code sends data to external LLM APIs (Gemini, OpenAI, etc.)
Periodic security hygiene checks

Check Process

Read skills/scan-process.md for the full 6-step scan process with bash commands.

Pattern Reference

Read skills/pattern-tables.md for API key regex patterns, insecure Python code patterns, and LLM-specific security patterns with severity classifications.

Behavioral Rules

Read guidelines.md for severity classifications, remediation requirements, and escalation rules.

Plus depuis ce dépôt

même dépôt

good-skill

Benkapner/claude-code-basecamp

Use when writing Python error handling code. Provides specific rules for exception chaining and custom error hierarchies.

2026-06-0314

security-skill

Benkapner/claude-code-basecamp

Use when reviewing code for security issues.

2026-06-0314

update-docs

Benkapner/claude-code-basecamp

Use when implementing features, fixing bugs, or refactoring code that may invalidate existing docs. Detects stale documentation by matching the code diff against in-repo doc files and applies targeted updates. Relevant when code changes rename, remove, or add APIs, fields, config keys, or CLI flags. Also applies when the user says "update docs", "check docs", or "are the docs stale", or when reviewing a branch for documentation accuracy.

2026-05-2814

clean-code-guide

Benkapner/claude-code-basecamp

Helps you write better Python code by following clean code principles and software engineering best practices.

2026-05-2014

verification-loop

Benkapner/claude-code-basecamp

Unified verification engine for Python data science projects. Covers environment checks, type checking, linting, tests, security scans, code review with DS anti-patterns, and notebook checks. Commands (/verify, /quality-gate) invoke different subsets of this skill.

2026-05-2014

brainstorming

Benkapner/claude-code-basecamp

Use when the user asks to design, plan, or explore approaches before implementing — creating features, building components, or adding functionality that would benefit from design exploration first.

2026-05-0814

name	security-check
version	1.0
description	Scan Python projects for credential leaks, secrets in code, insecure patterns, LLM API key exposure, PII leakage to external AI services, and .env/.gitignore misconfigurations. Focused on data science pipelines handling API keys, tokens, and LLM integrations.

Security Check Skill

Scan for credential leaks, insecure code patterns, and LLM security issues in Python data science projects.

When to Activate

Before committing changes
After modifying .env, .gitignore, or config files
When adding new API integrations or credentials
When reviewing code that handles tokens, keys, or passwords
When code sends data to external LLM APIs (Gemini, OpenAI, etc.)
Periodic security hygiene checks

Check Process

Read skills/scan-process.md for the full 6-step scan process with bash commands.

Pattern Reference

Read skills/pattern-tables.md for API key regex patterns, insecure Python code patterns, and LLM-specific security patterns with severity classifications.

Behavioral Rules

Read guidelines.md for severity classifications, remediation requirements, and escalation rules.