code-security-audit

Audit codebases for security vulnerabilities and misconfigurations across multiple languages.

32|5|Updated Mar 13, 2026

Search Tags:#security #vulnerability #audit #ai-agent #ssl #dependency #secret

Ready to run

npx skills add https://github.com/jiayaoqijia/Ottie --skill code-security-audit-jiayaoqijia

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: code-security-audit
Source: https://github.com/jiayaoqijia/Ottie/tree/main/workspace/skills/safety/code-security-audit
Command: npx skills add https://github.com/jiayaoqijia/Ottie --skill code-security-audit-jiayaoqijia

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires openssl, and includes scripts (resource) components.

What problem does it solve?

Auditing codebases for security vulnerabilities and misconfigurations across languages and ecosystems.

Core Features & Use Cases

OWASP Top 10 detection and remediation guidance
Dependency vulnerability scanning for Node, Python, Go, Rust, and more
Secret detection to identify hardcoded keys and credentials
SSL/TLS verification to ensure secure connections
AI Agent security checks to detect prompt injection and numeric risks
Security scoring to quantify risk and guide remediation
CI/CD-ready templates and multi-language support for integration

Quick Start

Run the full audit to generate a complete security report for your codebase.

Frequently Asked Questions about code-security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit my codebase for security vulnerabilities and hardcoded secrets?▼

To audit codebase security, run the full audit script to detect OWASP Top 10 issues, dependency vulnerabilities, secret leakage, and SSL/TLS misconfigurations. It generates a markdown security report with security scoring and optional CI/CD templates.

Does the security audit support scanning multiple programming languages like Python and Go?▼

The security audit supports JavaScript, TypeScript, Python, Go, Rust, and Java. It uses language-specific tooling like npm, pip-audit, govulncheck, and cargo-audit to detect dependency vulnerabilities and security risks across these ecosystems.

What's the best way to detect AI agent security risks like prompt injection?▼

The best way to detect AI agent security risks is using the audit script's AI agent security checks. It scans codebases to identify prompt injection and numeric risks, providing remediation guidance alongside standard vulnerability detection.

Can I integrate codebase security scanning into my CI/CD pipeline?▼

Yes, you can integrate codebase security scanning into CI/CD pipelines using the provided CI/CD-ready templates. The audit script outputs a markdown report and security score, enabling automated vulnerability and misconfiguration detection during builds.

Do I need openssl installed to verify SSL/TLS misconfigurations?▼

Yes, openssl is required to verify SSL/TLS misconfigurations. The audit script uses openssl and curl alongside language-specific tooling to ensure secure connections and detect protocol vulnerabilities across the codebase.