skills.rest
rad-security
rad-securityOFFICIAL
Explore all skills by this author →
WebsiteGitHub

audit

Scan workspaces for sensitive files, leaked credentials, and PII, then generate a graded security report.

2|1|Updated Apr 3, 2026
Search Tags:#security#codebase#audit#compliance#privacy#pii#secret-detection
One-click install
npx skills add https://github.com/rad-security/claude-code-plugin --skill audit-rad-security
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: audit
Source: https://github.com/rad-security/claude-code-plugin/tree/main/plugins/clawkeeper-cowork/skills/audit
Command: npx skills add https://github.com/rad-security/claude-code-plugin --skill audit-rad-security

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill helps teams quickly uncover security gaps in a codebase by scanning for sensitive files, exposed credentials, and PII risks, enabling faster remediation before deployment.

Core Features & Use Cases

  • File sensitivity scanning to classify assets and surface high-risk files.
  • Secret exposure detection across tracked code and data files.
  • PII detection and basic data discovery to support compliance reporting.
  • Use Case: Before releasing a project, run this audit to generate a risk report and prioritized remediation list.

Quick Start

Run the audit in the current working directory to generate a security posture report for your project.

Frequently Asked Questions about audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for exposed secrets and PII before deployment?▼

To scan your codebase for exposed secrets and PII before deployment, run an audit in your current working directory. The tool classifies file sensitivity, detects leaked credentials, and discovers PII to generate a graded risk report with remediation steps.

What is codebase security posture auditing and when do I need it?▼

Codebase security posture auditing identifies sensitive files, leaked credentials, and PII within a project. You need to run this audit prior to deployment or sharing to uncover security gaps and enable faster remediation of compliance risks.

Does this security audit tool work on any project folder or work directory?▼

Yes, the security audit tool is designed to work on code repositories, work directories, and project folders. It scans your current workspace to perform file sensitivity classification and secret exposure detection without requiring specific framework dependencies.

How do I generate a compliance report for PII discovery in my project?▼

To generate a compliance report for PII discovery, execute the audit in your project directory. It performs basic data discovery and PII detection, producing a graded report with actionable recommendations to support your compliance requirements.

What is the best way to identify high-risk files in a code repository?▼

The best way to identify high-risk files in a code repository is to run a file sensitivity scanning audit. This classifies assets and surfaces high-risk files containing exposed credentials or PII, providing a prioritized remediation list.

Related Skills

Explore More Legal & Compliance Skills→
Avi977Avi977

using-git-worktrees

Create isolated Git worktrees with priority-based directory selection and safety checks.

Community
Advanced
NVIDIA-NeMoNVIDIA-NeMo
58

agents-secure

Audit deployed NeMo agents for security vulnerabilities and PII exposure.

Official
Advanced
statick88statick88
1

vulnerability-scanning

Automate vulnerability detection across code, dependencies, containers, and infrastructure.

Community
Advanced
williamzujkowskiwilliamzujkowski
17

model-development

Plan end-to-end ML model development workflows with security and CI/CD integration.

Community
Advanced