audit-code

Detects hardcoded secrets and common vulnerabilities in source code.

Updated Feb 19, 2026

Search Tags:#code review #security #python #owasp #vulnerability scanning #secrets detection

Ready to run

npx skills add https://github.com/muhammadyana/openclaw-workspace --skill audit-code-muhammadyana

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: audit-code
Source: https://github.com/muhammadyana/openclaw-workspace/tree/main/skills/audit-code
Command: npx skills add https://github.com/muhammadyana/openclaw-workspace --skill audit-code-muhammadyana

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill identifies and flags potential security vulnerabilities and hardcoded secrets within your codebase, helping to prevent security breaches and data leaks.

Core Features & Use Cases

Secret Detection: Finds hardcoded API keys, tokens, and passwords.
Vulnerability Scanning: Detects dangerous function calls and common security flaws.
Use Case: Before committing code, run this Skill to automatically scan for any accidentally exposed API keys or potential SQL injection vulnerabilities.

Quick Start

Use the audit-code skill to scan the current project directory for security issues.

Frequently Asked Questions about audit-code

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan my codebase for hardcoded secrets and vulnerabilities before committing?▼

To scan for hardcoded secrets and vulnerabilities, run an automated security code review against your project directory to detect exposed API keys, tokens, and dangerous function calls. This identifies OWASP-style risks before deployment.

What is security code review and how does vulnerability scanning work?▼

Security code review is the process of analyzing source code to find security flaws. Vulnerability scanning automates this by detecting hardcoded secrets, sensitive file exposure, and dangerous function calls across various programming languages.

Do I need Python to run a security audit on my source code?▼

Yes, you need Python 3 installed to execute this security audit. The vulnerability scanning script relies on Python standard libraries to analyze your source code and detect common security risks and hardcoded secrets.

Can I detect OWASP-style risks and SQL injection vulnerabilities automatically?▼

Yes, you can automatically detect OWASP-style risks and potential SQL injection vulnerabilities. The code review process flags dangerous function calls and common security flaws across your codebase to prevent data breaches.

What types of sensitive files and dependency issues does code review detect?▼

Code review detects sensitive file exposure and dependency issues by analyzing your project structure. It flags hardcoded API keys, passwords, and dangerous function calls to secure your codebase from potential data leaks.