code-security-audit

Audit codebases against OWASP ASVS 5.0.0 and generate Markdown security reports.

18|3|Updated Jan 12, 2026

Search Tags:#security #vulnerability #owasp #audit #code-review #markdown-report #asvs

Ready to run

npx skills add https://github.com/buYoung/skills --skill code-security-audit-buyoung

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: code-security-audit
Source: https://github.com/buYoung/skills/tree/main/skills/code-security-audit
Command: npx skills add https://github.com/buYoung/skills --skill code-security-audit-buyoung

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Performs automated, comprehensive security audits of codebases using OWASP ASVS 5.0.0 and cross-reference sources to identify vulnerabilities and produce a consolidated Markdown report.

Core Features & Use Cases

Cross-domain security analysis across ASVS domains with mappings to API Top 10 2023, WSTG, and CheatSheet guidance.
Generates a structured Markdown audit report including executive summary, domain analyses, findings, and remediation roadmap for audits, reviews, and compliance checks.
Ideal for code reviews, security assessments, and compliance verifications across repositories.

Quick Start

Provide the path to the target codebase and trigger a full security audit to generate the report.

Frequently Asked Questions about code-security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate an OWASP ASVS security audit for my codebase?▼

To automate an OWASP ASVS security audit, provide the path to your target codebase and trigger a full security audit. The tool cross-references findings with the API Top 10 2023, CWE, and WSTG to produce a detailed Markdown report.

What is included in a code security audit report based on OWASP ASVS?▼

A code security audit report based on OWASP ASVS includes an executive summary, domain analyses, specific findings, and a remediation roadmap. It maps results to API Top 10 2023, CWE, and WSTG for comprehensive remediation guidance.

Can I audit multiple repositories in a single security assessment?▼

Yes, you can audit multiple repositories in a single security assessment. The tool applies OWASP ASVS 5.0.0 baseline checks to both standalone repositories and multi-repo ecosystems, consolidating findings into one Markdown report.

How does cross-referencing with API Top 10 2023 and CWE improve code review?▼

Cross-referencing with API Top 10 2023 and CWE during code review maps identified vulnerabilities to standardized weakness categories and testing guides. This provides actionable remediation guidance directly within the generated Markdown audit report.

What do I need to provide to generate a Markdown security audit report?▼

To generate a Markdown security audit report, you need to provide the path to the target codebase for access. The tool requires static analysis capabilities to scan the code and map results to remediation guidance using its internal references.