audit-security

Audit security vulnerabilities in a self-hosted genealogy application.

4|1|Updated Dec 7, 2025

Search Tags:#security #audit #input-validation #api-security #code-review #deployment-hardening #gedcom

Ready to run

npx skills add https://github.com/cacack/my-family --skill audit-security-cacack

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: audit-security
Source: https://github.com/cacack/my-family/tree/main/.claude/skills/audit-security
Command: npx skills add https://github.com/cacack/my-family --skill audit-security-cacack

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security auditing for a self-hosted genealogy application to identify input validation weaknesses, data handling risks, and deployment misconfigurations.

Core Features & Use Cases

Structured security checks: validate inputs, review API handlers, and ensure safe data handling and error reporting.
Data & deployment visibility: examine GEDCOM import, database queries, CORS, secrets management, and container configurations.
Audit-driven remediation: generate prioritized findings and actionable tickets for fixes to harden the system.

Quick Start

Run a security audit against the repository following the steps outlined in the Skill.

Frequently Asked Questions about audit-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit security vulnerabilities in a self-hosted genealogy application?▼

To audit security vulnerabilities in a self-hosted genealogy application, apply structured checks to API handlers, GEDCOM import workflows, and deployment configurations to identify validation gaps, sensitive data exposure, and misconfigurations.

What does a security audit check for in GEDCOM import workflows?▼

A security audit checks GEDCOM import workflows for input validation weaknesses, data handling risks, and safe error reporting to prevent sensitive data exposure and ensure safe data processing.

How do I ensure parameterized queries and safe API configuration during a code review?▼

To ensure parameterized queries and safe API configuration during a code review, enforce rigorous input validation, safe error handling, and secure API settings across all API handlers and database queries.

Can I check deployment hardening and secrets management for container configurations?▼

Yes, you can check deployment hardening by examining container configurations, CORS settings, and secrets management to identify misconfigurations and ensure sensitive data is properly protected.

How do I generate actionable tickets for security audit findings?▼

To generate actionable tickets for security audit findings, use audit-driven remediation to produce prioritized findings based on identified validation gaps, data handling risks, and deployment misconfigurations.

What are the limitations of auditing input validation weaknesses in self-hosted apps?▼

The limitations of auditing input validation weaknesses include the need to manually enforce parameterized queries and safe error handling across code and infrastructure, as the audit identifies gaps but requires separate remediation actions.