ワンクリックでManusで任意のスキルを実行

sec-auditor

スター0

フォーク0

更新日2026年7月14日 13:35

Guides the agent on executing static security scanning, auditing code for shell injections, and verifying API credential masks.

インストール

Codex または Claude でインストールこの Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。

Manusで実行

ソース

carlosmscabral

carlosmscabral/adk-frontends

GitHub リポジトリを開く Creator のリポジトリを見る

ダウンロード

Manusで実行

Static Security Auditing Skill

This skill outlines how to check codebases for security vulnerabilities, exposed secrets, and unmasked environment variables.

Guidelines

Credential Sweep: Scan files for raw credentials or key strings using regex patterns or tools:
```
grep -E "API_KEY|SECRET|PASSWORD" src/
```
Verify Shell Injection Safety: Inspect all usages of subprocess executions to ensure user inputs are never concatenated directly into shell strings (always use raw lists without shell=True).
Confirm Dependency Locks: Verify that lockfiles (package-lock.json, poetry.lock) exist and are validated against approved enterprise hash databases.

このリポジトリの他の Skills

同じリポジトリ

gcp-iam-troubleshooter

carlosmscabral/adk-frontends

Advanced diagnostics playbook for complex GCP authorization errors, cross-project lookups, and token impersonations.

2026-07-140

gcp-network-troubleshooter

carlosmscabral/adk-frontends

Advanced diagnostics playbook for private VPC connectivity, serverless network bridges, and firewall blocks.

2026-07-140

pytest-linter

carlosmscabral/adk-frontends

Guides the agent on how to run clean python styling, Black/Ruff compliance checks, and pytest execution on changed python scripts.

2026-07-140

visual-documentation

carlosmscabral/adk-frontends

Multi-format visual diagram design and validation playbook. Enforces syntax safety for Mermaid.js and interactive HTML/SVG mapping, utilizing headless verification tools.

2026-07-140

google-agents-cli-adk-frontend

carlosmscabral/adk-frontends

This skill should be used when the user wants to "build a frontend for an ADK agent", "connect a client to Vertex AI Reasoning Engine", "parse agent streaming responses", "integrate a browser client", "implement dynamic session creation on GCP", or needs client-side parsing and routing gotchas for GCP Agent Runtime. It compiles the exact schemas, parsing pathways, headers, and FastAPI proxy gotchas.

2026-07-140

name	sec-auditor
description	Guides the agent on executing static security scanning, auditing code for shell injections, and verifying API credential masks.

Static Security Auditing Skill

This skill outlines how to check codebases for security vulnerabilities, exposed secrets, and unmasked environment variables.

Guidelines

Credential Sweep: Scan files for raw credentials or key strings using regex patterns or tools:
```
grep -E "API_KEY|SECRET|PASSWORD" src/
```
Verify Shell Injection Safety: Inspect all usages of subprocess executions to ensure user inputs are never concatenated directly into shell strings (always use raw lists without shell=True).
Confirm Dependency Locks: Verify that lockfiles (package-lock.json, poetry.lock) exist and are validated against approved enterprise hash databases.