Security

Runs security scanners (semgrep, gosec, gitleaks) against your repo with three modes: quick gate for pre-PR checks, full gate for releases, and scheduled scans to catch drift. Outputs structured reports to a temp directory and blocks on high/critical findings. The execution contract is clear about what runs when, which is half the battle with security tooling that teams bolt on and then ignore. Pairs with a separate deps skill for vulnerability scanning. If you need a single command that actually stops bad code from shipping instead of generating noise in Slack, this is the wrapper you write yourself or use this one.

skills.sh installs: 1.4K
GitHub stars: 454
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add boshu2/agentops --skill security --agent claude-code

Installs into .claude/skills of the current project.

Files

Security Skill

Purpose: Find and report security weaknesses in code, scripts, authorized binaries, and repo-managed prompt surfaces, with honest coverage.

Use this skill for a caller-requested security review of code or of a plan or design before code exists, a repository scan, authorized binary assurance, dependency risk, secrets, or offline prompt-surface redteam.