skills.rest
mykaarma
mykaarmaOFFICIAL
Explore all skills by this author →
WebsiteGitHub

auditing-security

Identify and remediate application-layer security issues in Java/Spring Boot and TypeScript services.

4|1|Updated Apr 28, 2026
Search Tags:#typescript#authorization#security#validation#audit#java#sql-injection
One-click install
npx skills add https://github.com/mykaarma/kaarma-skills --skill auditing-security-mykaarma
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: auditing-security
Source: https://github.com/mykaarma/kaarma-skills/tree/main/skills/auditing-security
Command: npx skills add https://github.com/mykaarma/kaarma-skills --skill auditing-security-mykaarma

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Deep code security audit coverage for Java/Spring Boot and TypeScript services to uncover auth/authz gaps, input validation weaknesses, SQL injection risks, PII exposure, and API security flaws.

Core Features & Use Cases

  • Phase-based security review across codebases with explicit phase goals: Auth & Authorization, Input Validation, SQL Injection, Sensitive Data handling, and API safeguards.
  • Trigger phrases and prompts to engage AI assistants for security reviews, vulnerability discovery, and remediation guidance.
  • Actionable remediation patterns aligned to established security best practices and reference patterns.

Quick Start

Run the six-phase audit against your Java and TypeScript projects using the provided prompts to identify and remediate security issues.

Frequently Asked Questions about auditing-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit a Spring Boot application for security vulnerabilities?▼

You can audit a Spring Boot application for security vulnerabilities by running a phase-based review that checks auth, input validation, SQL injection, PII exposure, and API safeguards to identify and remediate issues.

What is the best way to check TypeScript services for authorization and PII exposure?▼

The best way to check TypeScript services for authorization and PII exposure is applying structured security audit phases that enforce defined patterns to discover vulnerabilities and provide actionable remediation steps.

Can I find and fix SQL injection risks in Java code before a release?▼

Yes, you can find and fix SQL injection risks in Java code before a release by triggering the audit's SQL injection phase, which enforces defined patterns and provides aligned remediation guidance for discovered flaws.

Does this security audit work for both Java and TypeScript codebases?▼

Yes, this security audit works for both Java and TypeScript codebases, providing deep coverage to uncover auth gaps, validation weaknesses, and API security flaws across multiple services during pre-release reviews.

How do I remediate input validation weaknesses discovered during a code security review?▼

To remediate input validation weaknesses discovered during a code security review, follow the actionable remediation patterns aligned to established security best practices provided by the audit's validation phase.

Related Skills

Explore More Software Engineering Skills→
loianeloiane
50

spring-security-baseline

Establish a secure Spring Security baseline for Spring Boot 7 applications.

Community
Intermediate
netresearchnetresearch
51

security-audit

Detect security vulnerabilities in PHP applications and score risks with CVSS v3.1.

Official
Advanced
statick88statick88
1

vulnerability-scanning

Automate vulnerability detection across code, dependencies, containers, and infrastructure.

Community
Advanced
LeoWSY-hashblueLeoWSY-hashblue
3

source-code-scanning

Scan source code for vulnerabilities, secrets, and dependency CVEs.

Community
Advanced