skills.rest
lee-to
lee-toCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

ai-factory.security-checklist

Run bash-based security audits for secrets, dependencies, and configuration gaps.

1.1k|92|Updated Feb 6, 2026
Search Tags:#security#owasp#dependencies#audit#secrets#static-analysis#ci-cd
One-click install
npx skills add https://github.com/lee-to/ai-factory --skill ai-factory-security-checklist
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ai-factory.security-checklist
Source: https://github.com/lee-to/ai-factory/tree/main/skills/security-checklist
Command: npx skills add https://github.com/lee-to/ai-factory --skill ai-factory-security-checklist

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires grep, git, npm, and includes scripts (resource) components.

What problem does it solve?

Security teams need a repeatable, OWASP-aligned checklist to uncover secrets, insecure dependencies, misconfigurations, and deployment risks before shipping.

Core Features & Use Cases

  • Automated checks for secrets exposure, dependency vulnerabilities, missing security headers, and common misconfigurations.
  • Scripted audit workflow that can be integrated into CI/CD to produce a security posture report.
  • Real-world use: teams maintaining web services or APIs can quickly validate security hygiene prior to release.

Quick Start

Run the audit.sh script in the skill's scripts directory to perform a full security audit on your project.

Frequently Asked Questions about ai-factory.security-checklist

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate a security audit for hardcoded secrets and vulnerable dependencies?▼

Automate a security audit by running a bash script that scans code for exposed secrets, checks .gitignore coverage, and executes npm audit to detect insecure dependencies before release.

Does this security checklist scan for missing security headers and configuration gaps?▼

This security checklist scans web and service repositories against OWASP guidelines to detect missing security headers, configuration gaps, hardcoded secrets, and insecure dependencies.

Can I integrate an OWASP security audit into my CI/CD pipeline?▼

Yes, the scripted audit workflow can be integrated into CI/CD pipelines to automatically run security checks and produce a security posture report prior to shipping.

How do I check my Node.js project for insecure dependencies and npm vulnerabilities?▼

Check Node.js vulnerabilities by running the audit workflow, which automatically detects package.json files and executes npm audit to surface dependency vulnerabilities.

What's the best way to find security TODOs and console.log usage in my codebase?▼

Find security TODOs and console.log usage by executing the bash-based audit workflow, which scans the repository to flag leftover debug logging and unresolved security tasks.

Do I need grep and git installed to run a comprehensive security audit?▼

Yes, you need grep and git installed locally, along with npm for dependency checks, as the bash-based audit workflow relies on these tools to scan code and track repository state.

Related Skills

Explore More Software Engineering Skills→
Camilo8902Camilo8902

dependency-vulnerability-triage

Analyze npm audit reports and generate prioritized vulnerability remediation plans.

Community
Advanced
jaskaranhundaljaskaranhundal
3

devsecops-pipeline

Analyze CI/CD security findings and recommend gate actions and remediation steps.

Community
Advanced
ckrono-progckrono-prog

security_scan

Conducts a multi-scanner security audit of a codebase for critical and high vulnerabilities.

Community
Intermediate
JosiahSiegelJosiahSiegel
51

defender-for-devops

Integrate Microsoft Defender for DevOps into Azure Pipelines for automated security scanning.

Community
Advanced