skills.rest
jiayaoqijia
jiayaoqijiaCOMMUNITY
Explore all skills by this author →
Website𝕏@yq_accGitHub

code-security-audit

Audit codebases for security vulnerabilities and misconfigurations across multiple languages.

32|5|Updated Mar 13, 2026
Search Tags:#security#vulnerability#audit#ai-agent#ssl#dependency#secret
One-click install
npx skills add https://github.com/jiayaoqijia/Ottie --skill code-security-audit-jiayaoqijia
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: code-security-audit
Source: https://github.com/jiayaoqijia/Ottie/tree/main/workspace/skills/safety/code-security-audit
Command: npx skills add https://github.com/jiayaoqijia/Ottie --skill code-security-audit-jiayaoqijia

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires openssl, and includes scripts (resource) components.

What problem does it solve?

Auditing codebases for security vulnerabilities and misconfigurations across languages and ecosystems.

Core Features & Use Cases

  • OWASP Top 10 detection and remediation guidance
  • Dependency vulnerability scanning for Node, Python, Go, Rust, and more
  • Secret detection to identify hardcoded keys and credentials
  • SSL/TLS verification to ensure secure connections
  • AI Agent security checks to detect prompt injection and numeric risks
  • Security scoring to quantify risk and guide remediation
  • CI/CD-ready templates and multi-language support for integration

Quick Start

Run the full audit to generate a complete security report for your codebase.

Frequently Asked Questions about code-security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my codebase for security vulnerabilities and hardcoded secrets?▼

To audit codebase security, run the full audit script to detect OWASP Top 10 issues, dependency vulnerabilities, secret leakage, and SSL/TLS misconfigurations. It generates a markdown security report with security scoring and optional CI/CD templates.

Does the security audit support scanning multiple programming languages like Python and Go?▼

The security audit supports JavaScript, TypeScript, Python, Go, Rust, and Java. It uses language-specific tooling like npm, pip-audit, govulncheck, and cargo-audit to detect dependency vulnerabilities and security risks across these ecosystems.

What's the best way to detect AI agent security risks like prompt injection?▼

The best way to detect AI agent security risks is using the audit script's AI agent security checks. It scans codebases to identify prompt injection and numeric risks, providing remediation guidance alongside standard vulnerability detection.

Can I integrate codebase security scanning into my CI/CD pipeline?▼

Yes, you can integrate codebase security scanning into CI/CD pipelines using the provided CI/CD-ready templates. The audit script outputs a markdown report and security score, enabling automated vulnerability and misconfiguration detection during builds.

Do I need openssl installed to verify SSL/TLS misconfigurations?▼

Yes, openssl is required to verify SSL/TLS misconfigurations. The audit script uses openssl and curl alongside language-specific tooling to ensure secure connections and detect protocol vulnerabilities across the codebase.

Related Skills

Explore More Software Engineering Skills→
softsparksoftspark
161

cve-scan

Detect known CVEs in project dependencies using native package manager audit tools.

Community
Intermediate
GrenguarGrenguar
1

node-aws-security-audit

Audit Node.js codebases for security vulnerabilities and generate Markdown reports.

Community
Advanced
eleva-labseleva-labs

security-audit

Plan security audits with checklists for dependency scanning and secret detection.

Official
Basic
kivo360kivo360
1

moai-domain-security

Mitigate security vulnerabilities in CI/CD pipelines using OWASP Top 10 and SAST/DAST workflows.

Community
Advanced