insecure-defaults

Audit configuration files for insecure defaults by scanning environment settings and deployed services to detect debug flags, permissive CORS, disabled CSRF, and default admin credentials. The skill generates a prioritized findings report with secure defaults and concrete remediation steps to apply before go-live.

Insecure default configurations creating production risk include debug mode in production, permissive CORS, disabled CSRF, default admin credentials, verbose error messages, and unauthenticated health endpoints. Identifying these fail-open patterns across manifests and service settings hardens deployments against unauthorized access and information leakage.

Detect permissive CORS and disabled CSRF by running a configuration-wide audit across environment files, manifests, and service settings. The skill surfaces these insecure defaults and provides actionable remediation guidance with secure default values for security engineers and DevOps teams to implement.

This security audit works for both pre-existing production deployments and pre-launch configurations. It applies across configuration files, environment settings, and deployed services to identify insecure defaults like verbose error messages and unauthenticated health endpoints, providing prioritized findings with secure defaults at any stage.

The best way to remediate default admin credentials and unauthenticated health endpoints is to run an insecure-defaults audit that surfaces these vulnerabilities. The skill provides a prioritized findings report containing secure defaults and concrete remediation steps to replace credentials and secure endpoints.

Run an insecure defaults audit before go-live to surface all fail-open patterns and apply fixes. The audit identifies insecure default configurations across environment files, manifests, and service settings, delivering a prioritized findings report with secure defaults and actionable remediation guidance for hardening deployments.