skills.rest
vulikjulik
vulikjulikCOMMUNITY
Explore all skills by this author →
GitHub

aif-security-checklist

Audit web applications and codebases for OWASP Top 10 vulnerabilities.

Updated May 16, 2026
Search Tags:#owasp#pre-deployment#security-audit#prompt-injection#secret-scanning#race-condition#vulnerability-scan
One-click install
npx skills add https://github.com/vulikjulik/DeepLom --skill aif-security-checklist-vulikjulik
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: aif-security-checklist
Source: https://github.com/vulikjulik/DeepLom/tree/main/.opencode/skills/aif-security-checklist
Command: npx skills add https://github.com/vulikjulik/DeepLom --skill aif-security-checklist-vulikjulik

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill eliminates the risk of deploying vulnerable applications by providing a structured, OWASP Top 10 (2021)-aligned security review process, catching critical flaws like injection, broken authentication, and exposed secrets before they impact production.

Core Features & Use Cases

  • Comprehensive Vulnerability Coverage: Audits for OWASP Top 10 risks, LLM prompt injection, race conditions, and infrastructure misconfigurations.
  • Automated Quick Checks: Runs a pre-built script to scan for hardcoded secrets, untracked .env files, vulnerable dependencies, and leftover debug logs.
  • Customizable Ignore Rules: Lets teams formally document and track accepted security risks via a project-specific SECURITY.md file, with clear visibility into ignored items during audits.
  • Use Case: Use this Skill right before deploying a new feature, when answering "is this code secure?", or during regular security reviews to ensure no critical vulnerabilities are missed.

Quick Start

Use the aif-security-checklist skill to run a full security audit of your project, identify all critical and high-severity vulnerabilities, and generate a pre-deployment security report.

Frequently Asked Questions about aif-security-checklist

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run an OWASP Top 10 security audit before deploying my web application?▼

A pre-deployment security audit checks for critical OWASP Top 10 vulnerabilities, hardcoded secrets, and LLM prompt injection risks. This Skill automates these vulnerability scans to ensure your codebase is secure before production release.

What is included in an automated pre-deployment vulnerability scan for web applications?▼

An automated pre-deployment vulnerability scan identifies hardcoded secrets, untracked .env files, vulnerable dependencies, and leftover debug logs. This Skill automates these checks to validate secure coding patterns across your full-stack project.

How do I detect LLM prompt injection vulnerabilities in my full-stack project?▼

Detect LLM prompt injection vulnerabilities by running this Skill's comprehensive security audit, which analyzes your full-stack project for injection flaws and common misconfigurations aligned with OWASP standards.

Can I track ignored security items and accepted risks during a codebase audit?▼

You can track accepted risks during a codebase audit by documenting them in a project-specific SECURITY.md file. This Skill reads these customizable ignore rules to provide clear visibility into formally accepted security vulnerabilities.

Does this security audit tool check for race conditions and dependency vulnerabilities?▼

Yes, this security audit tool checks for race conditions and dependency vulnerabilities. It runs automated scripts to scan for vulnerable dependencies and validates secure coding patterns to prevent critical deployment risks.

Related Skills

Explore More Software Engineering Skills→
Tonybleything76Tonybleything76

senior-secops

Automate security assessments of codebases and dependencies with Python scripts.

Community
Advanced
chrisxue90chrisxue90
2

security-review

Audit codebases for OWASP Top 10 vulnerabilities, secrets, and unsafe patterns.

Community
Advanced
M-Abdullah07M-Abdullah07
1

security-scanning-security-hardening

Coordinate specialized agents to scan and remediate application security vulnerabilities.

Community
Advanced
AndyAnh174AndyAnh174

Cross-Site Scripting and HTML Injection Testing

Detect and exploit stored, reflected, and DOM-based XSS vulnerabilities.

Community
Advanced