skills.rest
muhammadyana
muhammadyanaCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

audit-code

Detects hardcoded secrets and common vulnerabilities in source code.

Updated Feb 19, 2026
Search Tags:#code review#security#python#owasp#vulnerability scanning#secrets detection
One-click install
npx skills add https://github.com/muhammadyana/openclaw-workspace --skill audit-code-muhammadyana
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: audit-code
Source: https://github.com/muhammadyana/openclaw-workspace/tree/main/skills/audit-code
Command: npx skills add https://github.com/muhammadyana/openclaw-workspace --skill audit-code-muhammadyana

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill identifies and flags potential security vulnerabilities and hardcoded secrets within your codebase, helping to prevent security breaches and data leaks.

Core Features & Use Cases

  • Secret Detection: Finds hardcoded API keys, tokens, and passwords.
  • Vulnerability Scanning: Detects dangerous function calls and common security flaws.
  • Use Case: Before committing code, run this Skill to automatically scan for any accidentally exposed API keys or potential SQL injection vulnerabilities.

Quick Start

Use the audit-code skill to scan the current project directory for security issues.

Frequently Asked Questions about audit-code

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for hardcoded secrets and vulnerabilities before committing?▼

To scan for hardcoded secrets and vulnerabilities, run an automated security code review against your project directory to detect exposed API keys, tokens, and dangerous function calls. This identifies OWASP-style risks before deployment.

What is security code review and how does vulnerability scanning work?▼

Security code review is the process of analyzing source code to find security flaws. Vulnerability scanning automates this by detecting hardcoded secrets, sensitive file exposure, and dangerous function calls across various programming languages.

Do I need Python to run a security audit on my source code?▼

Yes, you need Python 3 installed to execute this security audit. The vulnerability scanning script relies on Python standard libraries to analyze your source code and detect common security risks and hardcoded secrets.

Can I detect OWASP-style risks and SQL injection vulnerabilities automatically?▼

Yes, you can automatically detect OWASP-style risks and potential SQL injection vulnerabilities. The code review process flags dangerous function calls and common security flaws across your codebase to prevent data breaches.

What types of sensitive files and dependency issues does code review detect?▼

Code review detects sensitive file exposure and dependency issues by analyzing your project structure. It flags hardcoded API keys, passwords, and dangerous function calls to secure your codebase from potential data leaks.

Related Skills

Explore More Software Engineering Skills→
Itinerant18Itinerant18

code-reviewer

Analyze codebases for security vulnerabilities and generate review reports.

Community
Intermediate
GeargrindadminGeargrindadmin

vulnerability-scanner

Scan project directories for hardcoded secrets, dangerous patterns, and dependency vulnerabilities.

Community
Advanced
jonnymuirjonnymuir
1

transitive-vulnerability-overrides

Resolve vulnerable transitive NuGet package warnings with targeted version overrides.

Community
Intermediate
statick88statick88
1

vulnerability-scanning

Automate vulnerability detection across code, dependencies, containers, and infrastructure.

Community
Advanced