Security
Skill
/findings
List recent AKA findings (masked) from the local store
Claude Code
$ npx -y skills add akasecurity/ai-tc --skill findings --agent claude-code
Codex
$ npx skills add akasecurity/ai-tc --skill findings -a codex -y
Cursor
$ npx skills add akasecurity/ai-tc --skill findings -a cursor -y
Gemini CLI
$ npx skills add akasecurity/ai-tc --skill findings -a gemini-cli -y
GitHub Copilot
$ npx skills add akasecurity/ai-tc --skill findings -a github-copilot -y
OpenCode
$ npx skills add akasecurity/ai-tc --skill findings -a opencode -y
Windsurf
$ npx skills add akasecurity/ai-tc --skill findings -a windsurf -y
SKILL.md
findings.SKILL.mdname: aka-findings description: List recent AKA findings (masked) from the local store
AKA findings
Run the read script and show the user its output **exactly as printed**. The script already prints its content inside a Markdown code fence — reproduce that verbatim and do **not** add another code fence, strip the fence, or reformat it. The fence is required: it is a space-aligned monospace table that Markdown would otherwise collapse. Do not reformat the columns or restate each row.
If the user asked to filter by severity — e.g. `--critical`, `--high`, `--medium`, `--low`, or `--severity <level>` — pass that flag through to the script unchanged. Otherwise run it with no flag.
node "${PLUGIN_ROOT}/scripts/query.js" findings [--severity <critical|high|medium|low>]This lists the most recent findings from `~/.aka/data/aka.db` with their rule, category, severity, action taken, and the **masked** match (raw secrets are never stored), narrowed to one severity when a filter is given. It is read-only.
Stats
17
Stars
0
Forks
Active
Maintenance
TypeScript
Language
Apache-2.0
License
Last commit
Created
Ships withai-tc
Guardrails for the agent harness. Regulated data stays on your machine, and every prompt and tool call is scanned before it runs.
1311 skills
Stars on GitHub
Momentum
- stars in total
- 13
Other skills on ai-tc.
dashboard
Launch the AKA web dashboard in your browser (reads your local store)
@akasecurityInstall Skilldetections
List installed AKA detection packs, versions, and available updates
@akasecurityInstall Skillexceptions
List active AKA detection exceptions (masked) from the local store
@akasecurityInstall SkillMore skills from other plugins.
api-security
Use for authorized security assessment of REST, GraphQL, WebSocket, or SOAP APIs, including discovery, authentication,…
@zhaoxuya520Install Skillabusing-dpapi-for-cred…
Extract and decrypt Windows DPAPI-protected secrets (Credential Manager, browser logins/cookies, Wi-Fi credentials, KeePass keys)…
@mukul975Install Skillclean-user-facing-text
Clean and finalize authorized natural-language text intended for readers by auditing suspicious invisible Unicode and rewriting…
@guillaumemeyerInstall Skill
Questions about findings.
- Which coding agents can use findings?
- findings installs in Claude Code, Codex, Cursor, Gemini CLI, GitHub Copilot, OpenCode and Windsurf with the skills CLI, using each agent's flag shown on this page. Flowy's auto-invocation, which fires a skill when your prompt matches, runs in Claude Code only.