skills.rest
ExsyDev
ExsyDevCOMMUNITY
Explore all skills by this author →
GitHub

aif-security-checklist

Automates security audits across OWASP Top 10 risk categories.

Updated Apr 3, 2026
Search Tags:#checklist#security#vulnerability#owasp#audit#pre-deployment#infrastructure
One-click install
npx skills add https://github.com/ExsyDev/eye-blinking --skill aif-security-checklist-exsydev
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: aif-security-checklist
Source: https://github.com/ExsyDev/eye-blinking/tree/main/.claude/skills/aif-security-checklist
Command: npx skills add https://github.com/ExsyDev/eye-blinking --skill aif-security-checklist-exsydev

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This checklist helps teams systematically identify and remediate security gaps across authentication, input validation, secrets management, and infrastructure, using established OWASP Top 10 guidance and project-specific overrides.

Core Features & Use Cases

  • OWASP Top 10 aligned security audit covering authentication, injection, XSS, CSRF, secrets management, API security, and infrastructure.
  • Pre-Deployment & Post-Deployment governance with a reusable checklist, security context, and quick automated audit script to enforce security posture.
  • Project-context overrides via .ai-factory/SECURITY.md rules to tailor findings and ignore items when justified.

Quick Start

Run the security audit script to generate a findings report and validate pre-deployment controls.

Frequently Asked Questions about aif-security-checklist

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate a pre-deployment security audit against the OWASP Top 10?▼

Automate a pre-deployment security audit by running a script that checks codebases and infrastructure against OWASP Top 10 controls, generating a structured findings report for authentication, injections, and secrets management.

What is included in an OWASP-aligned security checklist for infrastructure and APIs?▼

An OWASP-aligned security checklist includes review items for authentication, input validation, XSS, CSRF, API security, secrets management, and infrastructure to systematically identify and remediate security gaps before deployment.

Can I customize security audit rules to ignore specific vulnerabilities for my project?▼

Yes, you can customize security audit rules and ignore specific vulnerabilities by applying project-context overrides via a .ai-factory/SECURITY.md skill-context file to tailor findings when justified.

How do I perform ongoing security governance and risk assessment after deployment?▼

Perform ongoing security governance by applying the reusable pre-deployment and post-deployment checklist to continuously assess risk, enforce security posture, and manage vulnerabilities across your infrastructure over time.

Does the security audit checklist support project-specific overrides for internal best practices?▼

Yes, the security audit checklist supports project-specific overrides, allowing teams to integrate internal best practices alongside OWASP Top 10 guidance to tailor security reviews and justify ignored items.

Related Skills

Explore More Software Engineering Skills→
securityreviewaisecurityreviewai

project-overview-analysis

Analyzes Git repositories to produce summaries of their structure, risks, and key components.

Official
Intermediate
anevjesanevjes

azure-compliance

Detect Azure security risks, compliance violations, and configuration issues.

Community
Intermediate
HomericIntelligenceHomericIntelligence
18

scan-vulnerabilities

Scan code and dependencies for security vulnerabilities using Bandit, Safety, and Semgrep.

Official
Intermediate
zangxin75zangxin75

security-reviewer

Conduct security audits and code vulnerability reviews with SAST scans.

Community
Advanced