#!/usr/bin/env bash
# Setup script for cloudflare/security-audit-skill on Linux, from https://gitmanual.com/cloudflare/security-audit-skill
# Read it before you run it: the commands come from the repo's own README and files.
# Run: bash setup.sh
set -eo pipefail
trap 'echo "Setup stopped at the step above. Steps and fixes: https://gitmanual.com/cloudflare/security-audit-skill" >&2' ERR
step() { printf '\n\033[1m==> %s\033[0m\n' "$1"; }
have() { command -v "$1" >/dev/null 2>&1; }
# Installers put programs here; make them usable right away.
export PATH="$HOME/.local/share/mise/shims:$HOME/.cargo/bin:$HOME/.local/bin:$HOME/.deno/bin:$HOME/.bun/bin:$PATH"
# nvm is a shell function, so load it into this script when it's installed.
export NVM_DIR="${NVM_DIR:-$HOME/.nvm}"
load_nvm() { [ -s "$NVM_DIR/nvm.sh" ] && . "$NVM_DIR/nvm.sh"; }
have_nvm() { load_nvm >/dev/null 2>&1; type nvm >/dev/null 2>&1; }

step '1/2 Clone the repository'
[ -d 'security-audit-skill' ] || git clone https://github.com/cloudflare/security-audit-skill.git
cd 'security-audit-skill'

step '2/2 Follow the README: Usage'
# In the maintainers' order. Do the README instructions above first — they cover steps outside the terminal.
security audit this codebase
find security vulnerabilities in ./src
do a security review, output to ~/audits/my-project

echo 'Set up cloudflare/security-audit-skill.'
echo 'Manual: https://gitmanual.com/cloudflare/security-audit-skill'