skills.rest
subinium
subiniumCOMMUNITY
Explore all skills by this author →
Website𝕏@subiniumGitHub

audit-security

Detect and triage repository vulnerabilities into a structured report.

50|2|Updated Apr 14, 2026
Search Tags:#security#xss#secrets#triage#cors#sqli#code-audit
One-click install
npx skills add https://github.com/subinium/vibesubin --skill audit-security-subinium
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: audit-security
Source: https://github.com/subinium/vibesubin/tree/main/plugins/vibesubin/skills/audit-security
Command: npx skills add https://github.com/subinium/vibesubin --skill audit-security-subinium

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Through a minimal, human-focused security sweep, this skill surfaces the most actionable vulnerabilities in a repository and triages them for quick decision-making.

Core Features & Use Cases

  • Provides a small, hand-curated set of security checks that identify high-signal issues without overwhelming noise.
  • Scans for hardcoded secrets, injection patterns, path traversal, cookie flag gaps, wildcard CORS, and repository hygiene concerns, then triages findings into actionable categories.
  • Use Case: Before a release or open-sourcing, run the sweep to surface critical issues for reviewer approval.

Quick Start

Run the audit-security sweep on your codebase to generate a triaged report for quick review.

Frequently Asked Questions about audit-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for hardcoded secrets and injection vulnerabilities?▼

To scan for hardcoded secrets and injection vulnerabilities, you can run a security sweep that identifies high-signal issues like SQL injection, shell injection, and path traversal, then triages them into actionable categories for quick review.

What is the best way to triage repository vulnerabilities before open-sourcing?▼

The best way to triage repository vulnerabilities before open-sourcing is to run a hand-curated security sweep that classifies findings as REAL, FALSE POSITIVE, or NEEDS REVIEW, providing a structured report for quick reviewer approval.

Does this security sweep work across multiple programming languages?▼

Yes, this security sweep applies across multiple programming languages to detect common repository vulnerabilities like hardcoded secrets, injection patterns, missing cookie flags, and wildcard CORS configurations.

Can I detect wildcard CORS and missing cookie flags with a code audit?▼

Yes, you can detect wildcard CORS and missing cookie flags by running a hand-curated code audit that surfaces these specific security misconfigurations alongside dependency hygiene concerns in a structured triage report.

How does the triage report classify security findings?▼

The triage report classifies security findings into three categories: REAL vulnerabilities marked by severity (CRITICAL/HIGH/MEDIUM), FALSE POSITIVE for safe patterns, and NEEDS REVIEW for ambiguous issues requiring manual verification.

What security checks are included in a minimal repository audit?▼

A minimal repository audit includes hand-curated checks for hardcoded secrets, SQL injection, shell injection, path traversal, missing cookie flags, wildcard CORS, and dependency hygiene to surface high-signal vulnerabilities without overwhelming noise.

Related Skills

Explore More Software Engineering Skills→
brenordvbrenordv

security

Audit software systems for security vulnerabilities and regulatory compliance.

Community
Advanced
darblexdarblex

nodejs-security-audit

Audit Node.js HTTP servers for OWASP Top 10 security vulnerabilities.

Community
Advanced
thisisqubikathisisqubika

security-review

Analyze code repositories for vulnerabilities using SAST and AI triage.

Official
Advanced
Ed1s0nZEd1s0nZ
5.6k

mobile-app-security-testing

Analyze Android and iOS applications for security vulnerabilities using static and dynamic techniques.

Community
Advanced