auditor

Audit code for security vulnerabilities, exposed secrets, and dangerous patterns.

Updated Feb 25, 2026
One-click install
npx skills add https://github.com/ACubero/IA_AGENT_esqueleto_proyectos_python_antigravity --skill auditor-acubero
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: auditor
Source: https://github.com/ACubero/IA_AGENT_esqueleto_proyectos_python_antigravity/tree/main/.agent/skills/auditor
Command: npx skills add https://github.com/ACubero/IA_AGENT_esqueleto_proyectos_python_antigravity --skill auditor-acubero

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill proactively identifies and reports security vulnerabilities, exposed secrets, and dangerous coding patterns within your codebase, helping you maintain a secure and robust application.

Core Features & Use Cases

  • Secret Detection: Finds hardcoded credentials, API keys, and sensitive information.
  • Vulnerability Scanning: Detects common security flaws like SQL injection, OS command injection, and insecure deserialization.
  • Dependency Auditing: Checks for known vulnerabilities in project dependencies.
  • Use Case: Before deploying your application, run the auditor skill to ensure no secrets are accidentally committed and that the code adheres to secure coding practices, preventing potential breaches.

Quick Start

Run a full security audit on the current project directory.

Frequently Asked Questions about auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for exposed secrets and security vulnerabilities?

To scan for exposed secrets and security vulnerabilities, run a full audit on your project directory. The audit detects hardcoded credentials, API keys, and sensitive information, generating a detailed report categorizing findings by severity.

What is the best way to check project dependencies for known security flaws?

The best way to check project dependencies for known security flaws is through dependency analysis. The auditing process utilizes dependency analysis tools to check for known vulnerabilities and ensure code integrity and compliance with security best practices.

How does automated code auditing detect dangerous code patterns like SQL injection?

Automated code auditing detects dangerous code patterns like SQL injection and OS command injection by utilizing pattern matching. It scans the codebase to identify common security flaws and insecure deserialization, categorizing them by severity in a detailed report.

Can I run a security audit on my current project directory before deployment?

Yes, you can run a security audit on your current project directory before deployment. This ensures no secrets are accidentally committed and verifies that the code adheres to secure coding practices, preventing potential breaches.

Does the code audit check for insecure deserialization and OS command injection?

Yes, the code audit checks for insecure deserialization and OS command injection. It conducts comprehensive code audits to detect common security flaws, exposed secrets, insecure dependencies, and dangerous code patterns to maintain a robust application.

When do I need to run a comprehensive code audit for compliance checks?

You need to run a comprehensive code audit for compliance checks before deploying your application. It utilizes pattern matching, dependency analysis tools, and configuration checks to ensure code integrity and verify adherence to security best practices.