Security Test

This is a shift-left security workflow that runs SAST, SCA, and secrets detection on your PR diffs before merge. It scans only the changed code (not the entire repo), delegates heavy lifting to specialized ASPM and security reviewer agents, and returns actionable fixes as exact code diffs rather than generic advice. The whole thing is designed to stay under 2 minutes so it doesn't kill your CI pipeline. It's opinionated about blocking P0s like hardcoded secrets and SQL injection, but surfaces lower severity stuff as warnings. If you're tired of security findings showing up in prod because nobody ran Semgrep until Thursday, this automates the boring parts and actually tells you what to fix.

Install to Claude Code

npx -y skills add hoangnguyen0403/agent-skills-standard --skill security-test --agent claude-code