laravel-security-audit

Scan Laravel applications for OWASP vulnerabilities and misconfigurations.

Updated Apr 28, 2026
One-click install
npx skills add https://github.com/lucasFR2/LogiSync --skill laravel-security-audit-lucasfr2
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: laravel-security-audit
Source: https://github.com/lucasFR2/LogiSync/tree/main/skills/laravel-security-audit
Command: npx skills add https://github.com/lucasFR2/LogiSync --skill laravel-security-audit-lucasfr2

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill performs automated security audits on Laravel applications, helping to identify and address vulnerabilities, misconfigurations, and insecure practices.

Core Features & Use Cases

  • Security Audit Automation: Automatically scans Laravel applications for security issues based on OWASP standards and Laravel security best practices.
  • Vulnerability Detection: Identifies potential vulnerabilities like SQL injection, CSRF, XSS, IDOR, and file upload issues.
  • Risk Classification: Categorizes risks as critical, high, medium, low, or informational.
  • Audit Reports: Generates detailed audit reports with exploit scenarios and recommended fixes.

Quick Start

Run the security audit on your Laravel app with the 'audit my Laravel app' command.

Frequently Asked Questions about laravel-security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security audit on a Laravel application?

You can automate a Laravel security audit by scanning your codebase for known vulnerabilities and misconfigurations. This process checks for OWASP issues like SQL injection, CSRF, and XSS, then generates detailed audit reports with exploit scenarios and recommended fixes.

What vulnerabilities does an automated Laravel security audit detect?

An automated Laravel security audit detects common vulnerabilities including SQL injection, cross-site scripting (XSS), cross-site request forgery (CSRF), insecure direct object references (IDOR), and file upload issues based on OWASP standards.

Do I need a specific environment setup to scan my Laravel codebase for security issues?

Yes, you need a Laravel environment set up with proper permissions to execute the audit scripts. This ensures the automated security checks can accurately access and analyze your application's codebase for misconfigurations and vulnerabilities.

How are security risks classified when auditing a Laravel app?

Security risks identified during a Laravel audit are categorized by severity as critical, high, medium, low, or informational. This risk classification helps prioritize which vulnerabilities and insecure practices require immediate remediation.

What is the best way to check Laravel applications for OWASP security compliance?

The best way to check Laravel applications for OWASP security compliance is to automate security checks against Laravel's built-in security measures. This scans for common issues like SQL injection and XSS, producing audit reports with exploit scenarios and fixes.