Security scanning skill for AI coding agents checks deployments automatically

A developer has built a security scanning skill for AI coding agents that automatically checks deployments for common vulnerabilities. The skill was created after the developer repeatedly found exposed .env files and open ports in applications after their agent deployed them.

How it works

The skill file allows AI coding agents to check their own deployments automatically. It runs a scan after every deploy, looking for several specific security issues:

• Exposed secrets (specifically mentioned: .env files)
• Open database ports
• Missing security headers
• Leaked source code

The scan takes approximately 30 seconds to complete. The developer notes this is a proactive measure to catch security issues immediately after deployment rather than discovering them later.

Availability and discussion

The skill has been published on ClawHub at https://clawhub.ai/doureios39/preflyt. The developer is asking the community if others have built similar security-related skills for their AI coding agents.

This type of automated security scanning is particularly relevant for AI coding agents, which can rapidly deploy applications but may not have built-in security validation. Automated post-deployment checks can help catch common misconfigurations before they become security incidents.