audit-infra

What problem does it solve?

Audit and harden infrastructure code and deployment configurations by detecting exposed secrets, insecure Docker settings, vulnerable dependencies, misconfigured CORS, and unsafe webhooks before they reach production.

Core Features & Use Cases

• Scans repository and CI/CD configs for secrets and credentials exposed in code and environment files.
• Detects Docker and Docker Compose misconfigurations, non-root execution, and image hygiene.
• Flags vulnerable dependencies, missing migrations rollbacks, and insecure webhooks to prevent incidents.
• Use Case: On a multi-repo project, run audit-infra to surface secrets and tighten CI/CD security.

Quick Start

Run the audit-infra skill against your repository to identify secrets, misconfigurations, and insecure dependencies.