Security Toolkit
Investigates security alerts, scans for exposed secrets in GitHub, and manages compliance operations to catch vulnerabilities before code ships.
Install
npx skills add https://github.com/swannysec/robot-tools --skill security-toolkitWhat is this skill?
- secret-scanning-investigator for GitHub secret alerts
- Vanta compliance operations management
- Threat investigation workflows
- Part of swannysec robot-tools collection
- MIT licensed with commercial restrictions
Adoption & trust: 2 GitHub stars.
Who is it for?
Security-conscious developers who want AI-assisted secret scanning and compliance before shipping
Skip if: Teams with no GitHub or Vanta integration and no compliance requirements
What do I get? / Deliverables
- secret scan investigation report
- compliance operations summary
Recommended Skills
Azure Compliancemicrosoft/azure-skills
Openclaw Secure Linux Cloudxixu-me/skills
Entra Agent Idmicrosoft/azure-skills
Firebase Security Rules Auditorfirebase/agent-skills
Firestore Security Rules Auditorfirebase/agent-skills
Skill Vetteruseai-pro/openclaw-skills-security
Journey fit
Security investigation and scanning belong in the ship phase — catching vulnerabilities and exposed secrets before code reaches production. The toolkit directly targets security — scanning for secrets, investigating GitHub alerts, and compliance — making security the exact right subphase.