verify
Security scanning with UBS (Ultimate Bug Scanner). Use before commits, when scanning for bugs, when the user mentions "ubs", "bugs", "scan", "verify", or "security".
Security Assessment
Detected risks:
About verify
The 'verify' skill enables security scanning of code using UBS (Ultimate Bug Scanner). This tool helps identify over 1000 different bug patterns across multiple programming languages before committing code. By automating the scanning process, it ensures that security vulnerabilities are caught early in the development cycle, making it easier to enforce best practices and reduce risks associated with security flaws. The skill can be triggered by specific commands, user phrases, or during pre-commit checks, ensuring that security is continuously validated without disrupting workflow.
FAQ
How do I use the 'verify' skill before committing?
Run the command 'ubs --staged' to scan staged changes before committing. This is a mandatory step for all commits.
What languages does UBS support for security scanning?
UBS supports multiple languages including JavaScript, TypeScript, Python, C, C++, Rust, Go, Java, and Ruby.
Can I customize the strictness of the security scan?
Yes, you can adjust the strictness by using the '--profile' option. Use '--profile=strict' for production code or '--profile=loose' for prototyping.
How do I suppress false positives in the security scan?
To suppress false positives, you can add the comment '// ubs:ignore' around the code. However, use this sparingly to avoid undermining the scanning process.
What happens if the UBS scan finds security issues?
Issues are categorized by severity. Critical issues block the commit, while lower-level issues may require fixing or documenting justification before committing.
Install verify
Quick Setup:
- Copy the skill folder to
.claude/skills/ - Claude will automatically detect and use the skill
Repository
Mburdo/knowledge_and_vibes