skills.rest
horizontalsystems
horizontalsystemsOFFICIAL
Explore all skills by this author →
Website𝕏@unstoppablebyhsGitHub

aif-security-checklist

Identify and remediate security gaps in software projects using an OWASP-aligned audit checklist.

2|Updated Sep 13, 2022
Search Tags:#security#vulnerability#owasp#audit#pre-deployment#compliance#devsecops
One-click install
npx skills add https://github.com/horizontalsystems/solana-kit-ios --skill aif-security-checklist-horizontalsystems
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: aif-security-checklist
Source: https://github.com/horizontalsystems/solana-kit-ios/tree/main/.claude/skills/aif-security-checklist
Command: npx skills add https://github.com/horizontalsystems/solana-kit-ios --skill aif-security-checklist-horizontalsystems

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires grep, git, npm, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This security audit checklist helps teams identify and remediate security gaps in codebases and deployments through an OWASP-aligned framework, covering authentication, input validation, secrets management, and overall hardening.

Core Features & Use Cases

  • Modular categories for authentication, injection, XSS, CSRF, secrets, API security, and infrastructure.
  • Guidance for pre-deployment checks and ongoing security reviews across web and API services.
  • Support for ignore-items via .ai-factory/SECURITY.md and an optional automated audit script.

Quick Start

Run the security checklist against your project to surface findings and recommended fixes.

Frequently Asked Questions about aif-security-checklist

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a pre-deployment security audit on my code repository?▼

Run a pre-deployment security audit by applying an OWASP-aligned checklist to your code repository, checking authentication, input validation, and secrets management. The Skill uses automated scripts and npm audit to surface findings and recommended fixes.

What is the best way to check my project for OWASP vulnerabilities?▼

The best way to check for OWASP vulnerabilities is using a structured audit checklist covering authentication, injection, XSS, CSRF, and API security. It applies automated checks and tool guidance to identify and remediate security gaps in codebases.

Can I use this security checklist for ongoing DevSecOps hygiene checks?▼

Yes, you can use this security checklist for ongoing DevSecOps hygiene checks. It supports both initial security surveys and continuous reviews across web and API services to maintain infrastructure compliance and remediation.

How do I handle false positives during an automated code security scan?▼

Handle false positives during an automated code security scan by configuring ignore-items via the .ai-factory/SECURITY.md file. This mechanism streamlines remediation by excluding specific flagged items from the audit workflow.

Does the security audit workflow require git and npm dependencies?▼

The security audit workflow requires git, npm, and grep dependencies to function. These tools enable the automated checks, script execution, and dependency scanning necessary to identify security gaps in your software projects.

Related Skills

Explore More Software Engineering Skills→
jbdamaskjbdamask
29

repo-security-review

Audit GitHub repositories for malicious code and suspicious dependencies.

Community
Advanced
guideopsguideops

self-audit

Automate security audits in Next.js/PWA projects with npm and grep.

Community
Advanced
AgentientAgentient
2

owasp-code-analysis

Detect OWASP Top 10 2021 vulnerabilities in codebases and configurations.

Official
Basic
devendrapratapsinghdevendrapratapsingh
1

platform-security

Audit container images, Kubernetes configurations, cloud environments, and infrastructure as code for security vulnerabilities.

Community
Advanced