Identifies and verifies security vulnerabilities in source code via white-box analysis.
npx skills add https://github.com/3stoneBrother/code-audit --skill code-audit-3stonebrother
Please help me install this Agent Skill. Skill: code-audit Source: https://github.com/3stoneBrother/code-audit/tree/main Command: npx skills add https://github.com/3stoneBrother/code-audit --skill code-audit-3stonebrother
Code Audit provides automated, thorough code security evaluation by performing self-contained, white-box static analysis to uncover security vulnerabilities across multi-language codebases and large repositories.
Run a comprehensive security audit on a target repository to generate a remediation-ready report.
High-intent search queries and answers about installing and using this skill.
To perform a white-box security audit on a multi-language codebase, run a static analysis process that enforces anti-hallucination and applies a dual-track detection model to identify injections, auth issues, and business-logic flaws. This generates a structured report with remediation guidance for the detected vulnerabilities.
Yes, automated code auditing supports large repositories with multiple frameworks by utilizing multi-agent deep analysis for parallel exploration. This enables efficient vulnerability detection across architectures and delivers actionable remediation guidance for complex codebases.
The dual-track detection approach for identifying source code vulnerabilities combines sink-driven and control-driven analysis. This mechanism detects injections, authentication issues, and business-logic flaws by applying 143 mandatory detection items with language-specific checklists and WooYun case references.
Yes, static code analysis includes Docker deployment verification to ensure reproducible audit environments. This confirms that the automated security evaluation and vulnerability detection processes run consistently across multi-language codebases and large repositories.
To quickly triage security vulnerabilities during a source code audit, utilize the quick mode for rapid identification. This performs comprehensive white-box analysis across multi-language codebases, constructing attack chains and delivering structured reports for immediate remediation guidance.
The best way to find business-logic flaws in automated security audits is applying a dual-track detection model with multi-agent deep analysis. This approach uncovers complex vulnerabilities across frameworks and architectures while enforcing anti-hallucination for accurate vulnerability verification.
thesammykinsConfigure Traefik v3 entrypoints, routers, and Docker-labeled service routing.
chaigonAudit Python, Node.js, Go, and Java code for OWASP Top 10 vulnerabilities.
phatblatAutomate web application security assessments with reconnaissance, threat modeling, and vulnerability analysis.
notqueDetect project languages via marker files and run configured linters and analyzers.
