skills.rest
ichinya
ichinyaCOMMUNITY
Explore all skills by this author →
GitHub

aif-security-checklist

Automate OWASP-aligned security audits for codebases and CI pipelines.

Updated Aug 23, 2026
Search Tags:#checklist#security#owasp#audit#pre-deployment#compliance#devsecops
One-click install
npx skills add https://github.com/ichinya/idshka --skill aif-security-checklist-ichinya
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: aif-security-checklist
Source: https://github.com/ichinya/idshka/tree/main/.codex/skills/aif-security-checklist
Command: npx skills add https://github.com/ichinya/idshka --skill aif-security-checklist-ichinya

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

Security reviews are often manual and inconsistent; this Skill provides a repeatable, OWASP Top 10–based checklist to identify gaps early.

Core Features & Use Cases

  • OWASP Top 10–based audit checklist covering authentication, injection, XSS, CSRF, secrets management, and infrastructure controls
  • Scripted pre-deployment checks and CI hooks via the optional audit script
  • Remediation guidance, risk prioritization, and actionable findings for rapid fixes
  • Use-case: Pre-deployment review of a Node.js service to surface misconfigurations before release

Quick Start

Run the security audit against your codebase to generate a prioritized remediation list

Frequently Asked Questions about aif-security-checklist

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run an OWASP security audit before deploying my codebase?▼

Automate an OWASP Top 10 security audit by executing the optional script against your codebase to validate controls, generating a prioritized remediation list for pre-deployment review.

What does a pre-deployment security checklist cover for CI pipelines?▼

A pre-deployment security checklist covers OWASP Top 10 risks including authentication, injection, XSS, CSRF, secrets management, and infrastructure controls to validate security hygiene across CI pipeline environments.

Can I integrate automated security checks into my existing CI hooks?▼

Yes, you can integrate automated security checks into CI hooks using the optional audit script to run pre-deployment reviews and validate infrastructure controls within your existing software pipelines.

What's the best way to validate secrets management and infrastructure controls?▼

The best way to validate secrets management and infrastructure controls is applying a structured OWASP-aligned security checklist to identify misconfigurations early and surface actionable findings for rapid fixes.

Does this security audit provide remediation guidance for identified vulnerabilities?▼

Yes, the security audit provides remediation guidance, risk prioritization, and actionable findings for rapid fixes after validating authentication, injection, and infrastructure controls across your codebase.

Related Skills

Explore More Software Engineering Skills→
shakhovskiya-createshakhovskiya-create

deploy-audit

Audit CI/CD pipelines and infrastructure configurations for security and reliability.

Community
Advanced
kay6198835kay6198835

security-audit

Audit game codebases for security vulnerabilities and generate a prioritized remediation plan.

Community
Advanced
statick88statick88
1

vulnerability-scanning

Automate vulnerability detection across code, dependencies, containers, and infrastructure.

Community
Advanced
summarybotngsummarybotng
2

security-testing

Scan code, dependencies, and configurations for OWASP Top 10 vulnerabilities.

Official
Advanced