skills.rest
adrien-barret
adrien-barretCOMMUNITY
Explore all skills by this author →
𝕏@AtemisLabGitHub

code-security-audit

Detect OWASP Top 10 vulnerabilities in application source code.

8|4|Updated Feb 7, 2026
Search Tags:#OWASP#security#vulnerabilities#static-analysis#code-review#analyze#CI
One-click install
npx skills add https://github.com/adrien-barret/claude-kit --skill code-security-audit
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: code-security-audit
Source: https://github.com/adrien-barret/claude-kit/tree/main/project-template/.claude/skills/security/code-security-audit
Command: npx skills add https://github.com/adrien-barret/claude-kit --skill code-security-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill helps security engineers proactively identify OWASP Top 10 vulnerabilities and insecure patterns in application source code, reducing risk before deployment.

Core Features & Use Cases

  • Automated static analysis across languages and frameworks to detect risky code paths, auth flaws, and insecure data handling.
  • Focused coverage of OWASP Top 10 categories with actionable findings and remediation guidance.
  • Use Case: Integrate into CI to scan on every pull request or run locally against a source tree to surface high-risk code early.

Quick Start

Run: code-security-audit /path/to/project to analyze the codebase; optionally adjust analysis scope with configuration files.

Frequently Asked Questions about code-security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect OWASP Top 10 vulnerabilities in my source code?▼

To detect OWASP Top 10 vulnerabilities, you can run a static analysis scan against your source tree to identify risky code paths, authentication flaws, and insecure data handling across languages and frameworks.

Can I run static security analysis on every pull request in CI?▼

Yes, you can integrate static security analysis into CI systems to automatically scan source code on every pull request, surfacing high-risk code and insecure patterns early before deployment.

What is the best way to audit external integrations and input validation for security risks?▼

The best way to audit external integrations and input validation is performing static code checks and pattern matching for common risky constructs, categorizing findings by OWASP Top 10 with actionable remediation guidance.

Do I need specific dependencies to analyze code for security vulnerabilities?▼

You do not need specific dependencies to analyze code for vulnerabilities; the process requires only standard CLI tools and access to the project's source tree to perform static checks and pattern matching.

How do I scan a local project directory for insecure data handling and auth flaws?▼

You can scan a local project directory by running the analysis tool against your source code path, optionally adjusting the analysis scope with configuration files to target insecure data handling and auth flaws.

Related Skills

Explore More Software Engineering Skills→
jikimejikime
5

jikime-tool-ast-grep

Perform AST-based code analysis, security scanning, and refactoring across 40+ languages.

Community
Advanced
dhruvinrsonidhruvinrsoni

secure-coding-review

Review source code for OWASP Top 10 vulnerabilities and hardcoded secrets.

Community
Advanced
vladkeslervladkesler
39

javascript-sast

Scan JavaScript and Node.js projects for security vulnerabilities via npm audit and source patterns.

Community
Intermediate
DragonJARDragonJAR
330

Android-Pentesting-Skill

Analyze Android APKs for security vulnerabilities and generate bypass scripts.

Community
Advanced