security-check
Scan projects for credential leaks, secrets in code, insecure patterns, LLM API key exposure, PII leakage to external AI services, and .env/.gitignore…
Skill by Benkapner
Chalk Labs
Need help deploying security-check?
Chalk Labs sets up agents like this inside real teams: connected to your tools, tested on your data, with a human in the loop where it matters.
Install
Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install skill/benkapner-security-check
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Use cases: backend, data, ml, security
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.
- Tools
- No tools found
- Secrets
- None asked for
- Install scripts
- None found
Network hosts it talks to 1
codeload.github.com· found in install command
Files it touches
~/.claude/skills/security-check
What's inside
- Skill name
security-check- Description
- Scan projects for credential leaks, secrets in code, insecure patterns, LLM API key exposure, PII leakage to external AI services, and .env/.gitignore misconfigurations. Especially useful for data and API integrations, regardless of implementation language.
- License
- MIT
- Instructions
- 26 lines in SKILL.md · view on GitHub
Files (4)
- SKILL.md
- guidelines.md
- pattern-tables.md · skills/
- scan-process.md · skills/
SKILL.md (first lines)
# Security Check Skill Scan for credential leaks, insecure code patterns, and LLM security issues in Python data science projects. ## When to Activate - Before committing changes - After modifying `.env`, `.gitignore`, or config files - When adding new API integrations or credentials - When reviewing code that handles tokens, keys, or passwords - When code sends data to external LLM APIs (Gemini, OpenAI, etc.) - Periodic security hygiene checks ## Check Process Read `skills/scan-process.md` for the full 6-step scan process with bash commands. ## Pattern Reference Read `skills/pattern-tables.md` for API key regex patterns, insecure Python code patterns, and LLM-specific security patterns with severity classifications. ## Behavioral Rules Read `guidelines.md` for severity classifications, remediation requirements, and escalation rules.
From Benkapner/claude-code-basecamp, MIT.
More from Benkapner/claude-code-basecamp
- 0.644score
python-patterns
Benkapner
Team conventions for Python development — credentials, API clients, LLM response parsing, testing patterns, and data pipeline structure.
SkillAFreshness: A★ 18Claude Code +9 - 0.607score
ci-guard
Benkapner
Use when starting work in a repository under repositories/ that may lack CI configuration.
SkillBFreshness: B★ 18Claude Code +9 - 0.607score
semantic-versioning
Benkapner
Use when committing or pushing changes and the repository needs a version bump.
SkillBFreshness: B★ 18Claude Code +9 - 0.599score
brainstorming
Benkapner
User asks for design, planning, or approach exploration before implementation.
SkillBFreshness: B★ 18Claude Code +9 - 0.599score
verification-loop
Benkapner
Unified verification engine for Python data science projects.
SkillBFreshness: B★ 18Claude Code +9 - 0.577score
cost-speed-meter
Benkapner
Use when the user asks to measure command execution time or optimize a feedback loop.
SkillBFreshness: B★ 18Claude Code +9 - 0.552score
update-docs
Benkapner
Use when implementing features, fixing bugs, or refactoring code that may invalidate existing docs.
SkillCFreshness: C★ 18Claude Code +9 - 0.549score
refactoring-patterns
Benkapner
Measurement-driven code refactoring — profile before changing, measure after, keep only if metrics improve.
SkillCFreshness: C★ 18Claude Code +9
Signals
- Stars
- 18
- Forks
- 4
- Open issues
- 0
- Last commit (this folder)
- Sep 14, 2026 (1 month ago)
From GitHub (fetched Oct 24, 2026).
Details
- License
- MIT
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
- Source
- GitHubgithub-graphql
More from Benkapner
- 0.644score
python-patterns
Benkapner
Team conventions for Python development — credentials, API clients, LLM response parsing, testing patterns, and data pipeline structure.
SkillAFreshness: A★ 18Claude Code +9 - 0.607score
ci-guard
Benkapner
Use when starting work in a repository under repositories/ that may lack CI configuration.
SkillBFreshness: B★ 18Claude Code +9 - 0.607score
semantic-versioning
Benkapner
Use when committing or pushing changes and the repository needs a version bump.
SkillBFreshness: B★ 18Claude Code +9 - 0.599score
brainstorming
Benkapner
User asks for design, planning, or approach exploration before implementation.
SkillBFreshness: B★ 18Claude Code +9 - 0.599score
verification-loop
Benkapner
Unified verification engine for Python data science projects.
SkillBFreshness: B★ 18Claude Code +9 - 0.577score
cost-speed-meter
Benkapner
Use when the user asks to measure command execution time or optimize a feedback loop.
SkillBFreshness: B★ 18Claude Code +9
Done for you
Rather not set it up yourself?
Chalk Labs scopes, builds and runs agents for your team: the task audit, the eval harness, the integrations and the weekly ops report. Fixed scope, priced before we start.
See how we build AI agents →Read the case studies
Chalk Labs is a two-founder AI and growth studio. We build AI agents, CRMs and MVPs for Web3 and AI companies, and have shipped 50+ product and token launches.
- launches shipped
- 50+
- launches shipped
- media placements
- 500+
- media placements
- founders on every account
- 2
- founders on every account
Press we've placed: Forbes · CoinDesk · Decrypt · Cointelegraph · The Block
Rahil Jain, Co-founder, Chalk Labs. Ex-Goldman Sachs engineer. You talk to the person who builds it.
Get security-check running in your business
Tell us what you want to automate. A founder replies within one working day with a plan, not a pitch deck.
Cite this page
security-check skill. Agent Mart. https://agentmart.dev/skills/benkapner-security-check (last updated 2026-10-24)