skills.rest
Svarog83
Svarog83COMMUNITY
Explore all skills by this author →
GitHub

aif-security-checklist

Audit web and API codebases with an OWASP-aligned security checklist.

Updated Aug 4, 2025
Search Tags:#checklist#owasp#pre-deployment#compliance#vulnerabilities#security-audit#secrets-management
One-click install
npx skills add https://github.com/Svarog83/php-log-monitor --skill aif-security-checklist-svarog83
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: aif-security-checklist
Source: https://github.com/Svarog83/php-log-monitor/tree/main/.cursor/skills/aif-security-checklist
Command: npx skills add https://github.com/Svarog83/php-log-monitor --skill aif-security-checklist-svarog83

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires bash, grep, git, npm, and includes scripts (resource) components.

What problem does it solve?

Security review and risk assessment for software projects using a structured, OWASP-aligned checklist that helps teams identify and mitigate common vulnerabilities before deployment.

Core Features & Use Cases

  • OWASP-aligned audit covering authentication, injections, XSS, CSRF, secrets management, API security, and infrastructure security.
  • Pre-deployment and compliance workflows to surface findings, track risk, and guide remediation.
  • Ignore-items mechanism to tailor audits for scoped contexts while keeping a security baseline.

Quick Start

Run the security checklist to begin an automated audit of your project and surface findings.

Frequently Asked Questions about aif-security-checklist

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a pre-deployment security audit for web and API projects?▼

Run a pre-deployment security audit using an OWASP-aligned checklist to enforce authentication, injection, XSS, and CSRF defenses. It analyzes your codebase and surfaces vulnerabilities before deployment.

What is the best way to check for secrets management vulnerabilities in my codebase?▼

Check secrets management vulnerabilities using an automated security audit workflow that scans your codebase against an OWASP-aligned checklist to identify exposed credentials and configuration risks.

Does this security checklist require specific tools or environments to run?▼

Yes, the security checklist requires a bash environment with grep, git, and npm installed to execute its automated audit scripts and scan your project files for vulnerabilities.

Can I customize the OWASP compliance checks for specific parts of my project?▼

Yes, you can customize OWASP compliance checks using the ignore-items mechanism to tailor audits for scoped contexts, excluding irrelevant components while maintaining your security baseline.

How does the automated quick audit workflow handle infrastructure security checks?▼

The automated quick audit workflow handles infrastructure security by evaluating your codebase against an OWASP-aligned checklist to detect misconfigurations and enforce security best practices.

Related Skills

Explore More Legal & Compliance Skills→
guideopsguideops

self-audit

Automate security audits in Next.js/PWA projects with npm and grep.

Community
Advanced
walker-hzxwalker-hzx

security-verification

Identify and remediate security vulnerabilities in source code.

Community
Advanced
statick88statick88
1

vulnerability-scanning

Automate vulnerability detection across code, dependencies, containers, and infrastructure.

Community
Advanced
simotasimota
68

Probe

Perform dynamic security testing with OWASP ZAP and Burp Suite.

Community
Advanced