ai-factory.security-checklist

Audit codebases for OWASP-based security vulnerabilities with a runnable script.

Updated Apr 6, 2026
One-click install
npx skills add https://github.com/YaroslavKomarov/ShedulerBot --skill ai-factory-security-checklist-yaroslavkomarov
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ai-factory.security-checklist
Source: https://github.com/YaroslavKomarov/ShedulerBot/tree/main/.claude/skills/security-checklist
Command: npx skills add https://github.com/YaroslavKomarov/ShedulerBot --skill ai-factory-security-checklist-yaroslavkomarov

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Security audit checklist based on OWASP Top 10 and industry best practices. It covers authentication, injection, XSS, CSRF, secrets management, and more.

Core Features & Use Cases

  • Comprehensive, categorized checks for common web security risks across authentication, authorization, data handling, and deployment.
  • Reusable templates and guidance for pre-deployment reviews, code reviews, and security posture assessments.
  • Quick-start guidance with an automated audit script to scan projects and surface actionable findings.

Quick Start

Run the security audit script against your project before deployment.

Frequently Asked Questions about ai-factory.security-checklist

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate a pre-deployment security audit for my codebase?

To automate a pre-deployment security audit, run the ready-to-use script against your codebase to surface actionable findings. It provides standardized documentation and reproducible runbooks based on the OWASP Top 10 to guide remediation across authentication, injection, and secrets management.

What does an OWASP-based security checklist cover for web applications?

An OWASP-based security checklist covers common web vulnerabilities including authentication flaws, injection, XSS, CSRF, secrets management, and race conditions. It categorizes these risks to guide comprehensive code reviews and security posture assessments before deployment.

Can I use this security audit script for code reviews and posture assessments?

Yes, you can use this audit script for both code reviews and security posture assessments. It provides reusable templates and quick-start guidance to scan projects, identify vulnerabilities, and generate standardized documentation for remediation.

What is the best way to check for XSS and CSRF vulnerabilities before deployment?

The best way to check for XSS and CSRF vulnerabilities is using an OWASP-based audit checklist with an automated script. It scans your project to surface actionable findings and provides templated recommendations to guide remediation across data handling and deployment.

Does the security audit checklist include guidance for secrets management?

Yes, the security audit checklist includes comprehensive guidance for secrets management. It provides categorized checks and templated recommendations to identify exposed secrets and remediate vulnerabilities during pre-deployment reviews and security posture assessments.