skills.rest
RaNDoM6913
RaNDoM6913COMMUNITY
Explore all skills by this author →
GitHub

audit-backend

Audit backend source code for SQL injection, data mutation, and policy gaps.

1|Updated Mar 23, 2026
Search Tags:#security#backend#audit#sql-injection#auth#pii
One-click install
npx skills add https://github.com/RaNDoM6913/claude-code-superkit --skill audit-backend-random6913
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: audit-backend
Source: https://github.com/RaNDoM6913/claude-code-superkit/tree/main/packages/codex/skills/audit-backend
Command: npx skills add https://github.com/RaNDoM6913/claude-code-superkit --skill audit-backend-random6913

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audit backend code for SQL safety, error handling, auth coverage, PII exposure, dead code, and TODO density.

Core Features & Use Cases

  • Detect SQL injection risks and unsafe SQL construction patterns across codebases.
  • Identify unguarded DELETE statements, missing WHERE clauses, and unbounded queries that can cause data leakage or performance problems.
  • Highlight missing or weak authentication/authorization coverage, missing error context, and high TODO density to improve maintainability.

Quick Start

Run the audit workflow against your backend repository to generate a findings report with recommended fixes.

Frequently Asked Questions about audit-backend

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan backend code for SQL injection risks?▼

To scan backend code for SQL injection risks, run an audit workflow against your repository to identify unsafe SQL construction patterns and generate a findings report with actionable recommended fixes.

What is the best way to find unguarded DELETE statements and unbounded queries?▼

The best way to find unguarded DELETE statements and unbounded queries is to audit backend source code for data-access patterns, which highlights missing WHERE clauses that can cause data leakage or performance problems.

Does this backend audit tool work with Python and Node.js repositories?▼

Yes, this backend audit tool works with Python and Node.js repositories, as well as Go and Java stacks, by scanning for data-access patterns, middleware usage, and common risk hotspots across varying repository sizes.

How do I check my API for PII exposure in public responses?▼

To check your API for PII exposure in public responses, audit your backend source code to identify policy gaps in error handling and data leakage, which reports findings with recommended fixes.

Can I detect missing authentication coverage and swallowed errors in my backend?▼

Yes, you can detect missing authentication coverage and swallowed errors by auditing backend source code to highlight missing error context and weak auth coverage across your codebase.

Related Skills

Explore More Software Engineering Skills→
adihebbalaeadihebbalae
3

security-audit

Audit code against the OWASP Top 10 with static and dynamic analysis.

Community
Advanced
jadeclijadecli
1

security-scan

Scan spider code and data for security vulnerabilities and generate a JSON report.

Official
Advanced
AndyHsuTWAndyHsuTW

django-verification

Automate Django project verification with linters, security scanners, and tests.

Community
Advanced
YehudaFrankelYehudaFrankel
16

security-check

Detect authentication gaps, injection flaws, exposed endpoints, and secrets leakage in code and configurations.

Community
Advanced