Skip to content
security-compliance logo

Security & Compliance Guardian

security-compliance

Implement security scanning, vulnerability detection, and compliance checks. Use when working with security audits, dependency vulnerabilities, secret detection, CodeQL scanning, SAST/DAST tools, or security best practices. Handles threat modeling and security hardening.

mattnigh/skills_collection0installs24stars

SKILL.md

Full skill instructions

Security & Compliance Guardian

Mission

Maintain and enhance security posture for Brainarr through comprehensive scanning, vulnerability management, and compliance monitoring.

Current Security Infrastructure

  • ✅ CodeQL Scanning: Automated C# security analysis
  • ✅ Secret Detection: Pre-commit hooks + GitLeaks
  • ✅ Dependency Scanning: Dependabot automated updates
  • ✅ SBOM Generation: Software Bill of Materials in releases
  • ✅ Artifact Signing: Cosign keyless signing

Expertise Areas

1. Static Application Security Testing (SAST)

  • CodeQL query customization for C# and .NET
  • Security code review automation
  • Vulnerability pattern detection (injection, XSS, etc.)
  • False positive management and suppression

2. Dependency Security

  • Dependabot configuration optimization
  • Vulnerability remediation strategies
  • Supply chain attack prevention
  • License compliance checking

3. Secret Management

  • Credential scanning (GitLeaks, TruffleHog)
  • Environment variable security
  • Secrets rotation policies
  • API key protection strategies

4. Container Security (Future)

  • Image vulnerability scanning (Trivy, Grype)
  • Base image hardening
  • Runtime security monitoring
  • Registry security policies

5. Compliance & Auditing

  • SBOM generation and management
  • Security audit trails
  • Compliance reporting (OWASP, CWE)
  • Penetration testing coordination

Enhancement Opportunities

  1. Dynamic Analysis: Add DAST for runtime vulnerability detection
  2. Container Scanning: Scan Docker images when published
  3. Secrets Rotation: Automate API key rotation
  4. Security Dashboards: Centralized security metrics
  5. Threat Modeling: Regular security architecture reviews

Security Best Practices

Code Security

  • Input validation on all external data
  • Parameterized queries (no SQL injection)
  • Output encoding (prevent XSS)
  • Secure cryptographic operations
  • No hardcoded secrets

Dependency Management

  • Pin dependency versions
  • Regular security updates
  • Monitor transitive dependencies
  • Review dependency changes in PRs

API Security

  • Authentication required for AI providers
  • API key encryption at rest
  • Rate limiting to prevent abuse
  • Request/​response validation

Security Checklist

  • No hardcoded secrets in code
  • All dependencies up-to-date
  • CodeQL findings addressed
  • SBOM generated for releases
  • Artifacts signed and verified
  • Security advisories monitored
  • Incident response plan documented
  • Third-party audits completed

Related Skills

  • code-quality - Security is quality
  • release-automation - Secure release processes
  • observability - Security monitoring

Examples

Example 1: Review Security Scan Results

User: "Check the CodeQL findings and fix critical issues" Action: Review security alerts, prioritize by severity, fix vulnerabilities, add suppressions for false positives

Example 2: Update Vulnerable Dependency

User: "Dependabot found a critical vulnerability in Newtonsoft.Json" Action: Review vulnerability details, test compatibility, update version, verify tests pass, merge PR

Example 3: Implement Secret Scanning

User: "Add secret scanning to prevent API key leaks" Action: Configure GitLeaks, add .gitleaks.toml, create pre-commit hooks, scan history, document process

More skills from mattnigh

spring-framework-patterns logo
mattnigh/skills_collection

spring-framework-patterns

Comprehensive Spring Framework and Spring Boot best practices including dependency injection patterns, bean lifecycle and scopes, REST API development, Spring Data JPA, service layer design, Spring Security, testing strategies, caching, AOP, async processing, error handling, and common anti-patte...

24 0
View

TypeScript厳格モードによる型安全性設計を専門とするスキル。 📖 参照書籍: - 『Effective TypeScript』(Dan Vanderkam): 型設計 📚 リソース参照: - `resources/Level1_basics.md`: レベル1の基礎ガイド - `resources/Level2_intermediate.md`: レベル2の実務ガイド - `resources/Level3_advanced.md`: レベル3の応用ガイド - `resources/Level4_expert.md`: レベル4の専門ガイド - `resources/di...

24 0
View
deploying-cloud-k8s logo
mattnigh/skills_collection

deploying-cloud-k8s

Deploys applications to cloud Kubernetes (AKS/GKE/DOKS) with CI/CD pipelines. Use when deploying to production, setting up GitHub Actions, troubleshooting deployments. Covers build-time vs runtime vars, architecture matching, and battle-tested debugging.

24 0
View
moai-alfred-agent-guide logo
mattnigh/skills_collection

moai-alfred-agent-guide

19-agent team structure, decision trees for agent selection, Haiku vs Sonnet model selection, and agent collaboration principles. Use when deciding which sub-agent to invoke, understanding team responsibilities, or learning multi-agent orchestration.

24 0
View
mermaid-diagram-generator logo
mattnigh/skills_collection

mermaid-diagram-generator

Converts architecture descriptions, module specs, or workflow docs into Mermaid diagrams. Use when visualizing brick module relationships, workflows (DDD, investigation), or system architecture. Supports: flowcharts, sequence diagrams, class diagrams, state machines, entity relationship diagrams,...

24 0
View
pre-flight-check logo
mattnigh/skills_collection

pre-flight-check

INVOKE FIRST before any code work. Validates git workflow (branch, issue, worklog) and checks approach. Use at START of every task and END before completing. Prevents skipped steps.

24 0
View
browser-dev-tools logo
mattnigh/skills_collection

browser-dev-tools

This skill should be used when working with browser-rendered artifacts (i.e. Bun, React/React Native) to proactively validate that development work on localhost is being built appropriately and to support debugging browser-rendered content. Use this skill after making frontend changes to verify t...

24 0
View
lead-dev logo
mattnigh/skills_collection

lead-dev

Lead Développeur - Coordination technique opérationnelle, code review, mentoring et livraison. Pair de web-dev-process au niveau OPÉRATIONS.

24 0
View
worker-monitor logo
mattnigh/skills_collection

worker-monitor

Monitor Docker workers, RQ queue health, and auto-scale workers (max 4). Use when: checking job progress, monitoring queue depth, scaling workers up/down, diagnosing slow processing, or waiting for jobs to complete. Referenced by data-quality skill during reprocessing.

24 0
View
quality-advisor logo
mattnigh/skills_collection

quality-advisor

Proactive quality guidance system that monitors artifact creation and provides real-time feedback on documentation quality

24 0
View
bump-version logo
mattnigh/skills_collection

bump-version

This skill should be used when the user wants to bump the version number in the workspace. It updates versions across all pyproject.toml files (root, tde, and tda packages) and the CHANGELOG.md to keep them synchronized.

24 0
View

Popular AI tools

Kaiber logo
Video

Kaiber

Generate, edit, and beat-sync AI video with leading models in one workspace.

Paid
View
Vimcal logo
Productivity

Vimcal

The world's fastest calendar for remote work

Free
View

Transform Your Design with AI Designer by ImgCreator.ai

Freemium
View
Akool AI logo
Content & writing

Akool AI

Revolutionizing Video Production with AI-Powered Creativity

Paid
View

Extend an image past the frame and let AI fill the new aspect ratio.

Freemium
View
StarByFace logo
Security

StarByFace

Discover your celebrity doppelgänger with StarByFace!

Free
View
C

ChainClarity explains 700+ crypto whitepapers in plain English, with layered summaries, comparisons, research tools, alerts, and a $4.99 Pro plan.

Freemium
View
Opus Clip logo
Coding & apps

Opus Clip

Opus.ai: Revolutionize Your Web Experience

Free
View