Security Test

This is a shift-left security workflow that runs SAST, SCA, and secrets detection on your PR diffs before merge. It scans only the changed code (not the entire repo), delegates heavy lifting to specialized ASPM and security reviewer agents, and returns actionable fixes as exact code diffs rather than generic advice. The whole thing is designed to stay under 2 minutes so it doesn't kill your CI pipeline. It's opinionated about blocking P0s like hardcoded secrets and SQL injection, but surfaces lower severity stuff as warnings. If you're tired of security findings showing up in prod because nobody ran Semgrep until Thursday, this automates the boring parts and actually tells you what to fix.

GitHub stars: 504
last updated: Jun 11, 2026

View on GitHub

Install

$ npx -y skills add hoangnguyen0403/agent-skills-standard --skill security-test --agent claude-code

Installs into .claude/skills of the current project.

Files

Security Test Skill

[!IMPORTANT] Fast, continuous DevSecOps pipeline for Pull Requests and active branches. Runs SAST, SCA, and secrets detection to catch vulnerabilities before they merge.

Instructions

When the user asks to perform this workflow, execute the following steps:

🛡️ Continuous Security Test (Shift-Left)

Goal: Execute a high-speed security audit on a branch or PR delta and stop obvious security regressions before merge.

Policy: Fast execution (< 2 mins). Focus on SAST, SCA, secrets, and trust-boundary regressions. No dynamic exploitation required.