Audit security vulnerabilities in a self-hosted genealogy application.
npx skills add https://github.com/cacack/my-family --skill audit-security-cacack
Please help me install this Agent Skill. Skill: audit-security Source: https://github.com/cacack/my-family/tree/main/.claude/skills/audit-security Command: npx skills add https://github.com/cacack/my-family --skill audit-security-cacack
Security auditing for a self-hosted genealogy application to identify input validation weaknesses, data handling risks, and deployment misconfigurations.
Run a security audit against the repository following the steps outlined in the Skill.
High-intent search queries and answers about installing and using this skill.
To audit security vulnerabilities in a self-hosted genealogy application, apply structured checks to API handlers, GEDCOM import workflows, and deployment configurations to identify validation gaps, sensitive data exposure, and misconfigurations.
A security audit checks GEDCOM import workflows for input validation weaknesses, data handling risks, and safe error reporting to prevent sensitive data exposure and ensure safe data processing.
To ensure parameterized queries and safe API configuration during a code review, enforce rigorous input validation, safe error handling, and secure API settings across all API handlers and database queries.
Yes, you can check deployment hardening by examining container configurations, CORS settings, and secrets management to identify misconfigurations and ensure sensitive data is properly protected.
To generate actionable tickets for security audit findings, use audit-driven remediation to produce prioritized findings based on identified validation gaps, data handling risks, and deployment misconfigurations.
The limitations of auditing input validation weaknesses include the need to manually enforce parameterized queries and safe error handling across code and infrastructure, as the audit identifies gaps but requires separate remediation actions.
gil-kapelScan dependencies, source code, and configurations for security vulnerabilities.
levnikolaevichAudit codebases for build health issues and output structured JSON reports.
riftzen-bitIdentify and remediate security misconfigurations in Java Spring Boot services.
BagelHolePerform DAST scans on web applications and APIs with OWASP ZAP.
