skills.rest
drsapaev
drsapaevCOMMUNITY
Explore all skills by this author →
GitHub

aif-security-checklist

Audit software security against OWASP Top 10 with automated scripts.

2|Updated Aug 22, 2025
Search Tags:#checklist#security#vulnerability#owasp#secure coding#audit
One-click install
npx skills add https://github.com/drsapaev/final --skill aif-security-checklist-drsapaev
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: aif-security-checklist
Source: https://github.com/drsapaev/final/tree/main/.codex/skills/aif-security-checklist
Command: npx skills add https://github.com/drsapaev/final --skill aif-security-checklist-drsapaev

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a robust security checklist and automated audit scripts to identify and mitigate common vulnerabilities in software development, ensuring your applications are secure before deployment.

Core Features & Use Cases

  • OWASP Top 10 Coverage: Addresses critical security risks like injection, authentication flaws, XSS, and secrets management.
  • Automated Audits: Runs scripts to check for hardcoded secrets, vulnerable dependencies, and insecure configurations.
  • Pre-Deployment Checklist: Guides developers through essential security checks before releasing to production.
  • Use Case: Before deploying a new microservice, run the security checklist to ensure all critical vulnerabilities are addressed, preventing potential breaches.

Quick Start

Run the automated security audit script to check for common vulnerabilities.

Frequently Asked Questions about aif-security-checklist

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security audit for hardcoded secrets and vulnerable dependencies before deployment?▼

Run an automated security audit to detect hardcoded secrets, vulnerable dependencies, and insecure configurations before deployment. The checklist provides scripts for immediate vulnerability detection alongside secure coding guidance.

What does the OWASP Top 10 secure coding checklist cover for vulnerability prevention?▼

The OWASP Top 10 secure coding checklist covers authentication, injection, XSS, CSRF, secrets management, API security, infrastructure, prompt injection, and race conditions. It guides developers through essential checks to mitigate critical security risks.

Can I use automated scripts to check for XSS and CSRF vulnerabilities in my codebase?▼

Yes, you can use automated audit scripts to check for XSS, CSRF, and other common vulnerabilities in your codebase. These scripts identify insecure configurations and hardcoded secrets to ensure applications are secure before production release.

What is the best way to secure a new microservice against injection and authentication flaws?▼

The best way to secure a new microservice is running a comprehensive security checklist addressing injection and authentication flaws. This prevents potential breaches by verifying all critical vulnerabilities are mitigated before deployment.

Does this security audit checklist include checks for API security and prompt injection?▼

Yes, the security audit checklist includes checks for API security and prompt injection. It also covers race conditions, secrets management, and infrastructure security based on OWASP Top 10 and best practices.

Related Skills

Explore More Software Engineering Skills→
ialamehialameh
2

security-scanner

Scan code repositories for secrets, dependency vulnerabilities, and OWASP patterns.

Community
Advanced
QuestNova502QuestNova502
4

security-audit

Identify and remediate PHP security vulnerabilities using OWASP patterns.

Community
Advanced
AgentientAgentient
2

owasp-code-analysis

Detect OWASP Top 10 2021 vulnerabilities in codebases and configurations.

Official
Basic
LeandroBenjaminLLeandroBenjaminL

security-auditor

Automate security audits with static and dynamic analysis tools.

Community
Advanced