---
title: "Security Scan - Air Market"
description: "Before code goes out, it's worth a look for the obvious problems: known weaknesses, credentials left in a file, risky dependencies. This runs a quick focused pass over what you've changed. Reach for…"
canonical: "https://airmarket.ai/app/security-scan"
---

[Air Market](/) / [Security](/category/security) / Security Scan

Skill by [zereight](/@zereight)

# Security Scan

Sweep your changes for problems before anyone else sees them

## What this does

Before code goes out, it's worth a look for the obvious problems: known weaknesses, credentials left in a file, risky dependencies. This runs a quick focused pass over what you've changed. Reach for it when you're about to commit or ship and want a check first.

### Top 3 things it does for you

- Check code changes for vulnerabilities
- Look for secrets that shouldn't be committed
- Give dependencies a once-over

## Information

**Security Scan at a glance**

|  |  |
| --- | --- |
| Kind | Skill |
| Publisher | [zereight](/@zereight) |
| Category | [Security](/category/security) |
| Works with | Agent Skills - an open standard supported by 40+ agents |
| Size | 3 KB |
| Licence | MIT |
| Repository | [zereight/gitlab-mcp](https://github.com/zereight/gitlab-mcp/tree/d6971bcf2e52eef3147bc1ab8ab7f4d6504a3656/.github/skills/security-scan) |
| GitHub stars | 1,917 (as of Nov 2026) |
| Installs | 57, counted by skills.sh (Nov 2026) |

## Security report

**Verified.** AIR scanned this exact version of Security Scan and flagged nothing. AIR's verdict: **safe**.

**What Security Scan's check was run against**

|  |  |
| --- | --- |
| Commit | d6971bcf2e52eef3147bc1ab8ab7f4d6504a3656 |
| Content hash | 539f91d2f72cd0fab4dd0bfc9409bbcd791c700d09b681b8503d997e71be02d9 |
| Files read | [Browse the files at this exact commit](https://github.com/zereight/gitlab-mcp/blob/d6971bcf2e52eef3147bc1ab8ab7f4d6504a3656/.github/skills/security-scan/SKILL.md) |

A scan is named by the exact content it read, not by a version number. A different version is a different artifact, and nothing here applies to a version AIR has not scanned.

[Read the full security report for Security Scan](/security/security-scan)

## About Security Scan

This runs a focused security sweep over code changes - a quick pass rather than an open-ended review.

It covers scanning for vulnerabilities, checking for secrets, and checking dependencies, and starts when you ask for a security scan, check or audit.

## What's inside

- SKILL.md - instructions

## Questions

### Is Security Scan safe to install?

AIR scanned this exact version of Security Scan and flagged nothing. AIR's verdict: safe. The verdict is named by the content that was read, at commit d6971bcf2e52, so it cannot drift onto a version nobody scanned. The full report is at https://airmarket.ai/security/security-scan.

### How do I install Security Scan?

Open https://airmarket.ai/app/security-scan on Air Market and use the install action: Air Market hands Claude a prompt naming this exact skill, and Claude sets it up. Source, pinned to the exact commit this listing describes: https://github.com/zereight/gitlab-mcp/tree/d6971bcf2e52eef3147bc1ab8ab7f4d6504a3656/.github/skills/security-scan. Install from that link, not the branch.

## Related on Air Market

- [More Security listings](/category/security)
- [Everything by zereight](/@zereight)

---

Canonical URL: <https://airmarket.ai/app/security-scan>