skills.rest
batFormat
batFormatCOMMUNITY
Explore all skills by this author →
GitHub

aif-security-checklist

Audit codebases against OWASP Top 10 with automated security scripts.

Updated Feb 23, 2026
Search Tags:#code review#checklist#security#vulnerability#owasp#audit
One-click install
npx skills add https://github.com/batFormat/sancrm-docs --skill aif-security-checklist-batformat
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: aif-security-checklist
Source: https://github.com/batFormat/sancrm-docs/tree/main/.claude/skills/aif-security-checklist
Command: npx skills add https://github.com/batFormat/sancrm-docs --skill aif-security-checklist-batformat

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a robust framework for identifying and mitigating security vulnerabilities in your codebase, ensuring compliance with industry best practices and preventing common attack vectors.

Core Features & Use Cases

  • OWASP Top 10 Coverage: Audits against the latest OWASP Top 10 vulnerabilities, including injection, authentication flaws, XSS, and more.
  • Automated Scripting: Executes a shell script for quick checks on secrets, dependencies, and code quality.
  • Pre-Deployment Checklist: Offers a critical, actionable checklist for ensuring production readiness.
  • Ignored Items Management: Allows teams to document and manage specific security checks that are intentionally bypassed, with clear reasoning.
  • Use Case: Before deploying a new feature, run a full security audit to catch potential vulnerabilities like hardcoded secrets or unvalidated user input, ensuring a secure release.

Quick Start

Run a full security audit of the current project.

Frequently Asked Questions about aif-security-checklist

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security audit based on OWASP Top 10 before deployment?▼

To run a security audit based on OWASP Top 10, execute the automated shell script to scan for secrets, check dependencies, and validate code quality, then complete the actionable pre-deployment checklist to ensure production readiness.

What is the best way to check my codebase for hardcoded secrets and vulnerabilities?▼

The best way to check for hardcoded secrets and vulnerabilities is to run the automated code scanning script, which evaluates your project against OWASP Top 10 best practices including injection, XSS, CSRF, and secrets management.

Does this security checklist cover prompt injection and race conditions?▼

Yes, the security checklist covers prompt injection and race conditions, alongside authentication flaws, API security, infrastructure checks, and XSS, providing a comprehensive audit of modern attack vectors.

Can I document intentionally bypassed security checks during a code review?▼

You can document intentionally bypassed security checks during code review by adding them to a SECURITY.md file, which manages ignored items with clear reasoning for your team's audit tracking.

What security vulnerabilities are scanned for in an automated dependency check?▼

An automated dependency check scans for vulnerabilities related to outdated packages, hardcoded secrets, and general code quality issues as part of the pre-deployment readiness verification.

Related Skills

Explore More Software Engineering Skills→
devon87warren-afkdevon87warren-afk

vulnerability-scanner

Scan project codebases for security vulnerabilities across dependencies, secrets, and configurations.

Community
Advanced
chrisxue90chrisxue90
2

security-review

Audit codebases for OWASP Top 10 vulnerabilities, secrets, and unsafe patterns.

Community
Advanced
statick88statick88
1

vulnerability-scanning

Automate vulnerability detection across code, dependencies, containers, and infrastructure.

Community
Advanced
statick88statick88
1

security-auditor

Scan codebases for security vulnerabilities, dependency issues, and secret exposure.

Community
Advanced