lc:security-audit

Detects and reports common web application vulnerabilities and their locations.

12|2|Updated Apr 8, 2026
One-click install
npx skills add https://github.com/edulazaro/laraclaude --skill lc-security-audit
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: lc:security-audit
Source: https://github.com/edulazaro/laraclaude/tree/main/skills/security-audit
Command: npx skills add https://github.com/edulazaro/laraclaude --skill lc-security-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill addresses the critical need for automated security oversight in Laravel applications by identifying common vulnerabilities like SQL injection, XSS, and mass assignment before they reach production.

Core Features & Use Cases

  • Vulnerability Scanning: Automatically detects SQL injection risks, unescaped Blade output, and hardcoded secrets.
  • Automated Remediation: Provides guided, interactive fixes for common issues like missing CSRF protection or mass assignment vulnerabilities.
  • Use Case: Run a full project audit before a deployment to ensure no hardcoded API keys or debug mode settings are accidentally exposed in the production environment.

Quick Start

Run the security audit skill to scan the entire project for vulnerabilities and report all findings.

Frequently Asked Questions about lc:security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my Laravel application for SQL injection and XSS vulnerabilities?

Scan Laravel applications for vulnerabilities by running an automated static analysis on source code and configuration files. This detects SQL injection, XSS, mass assignment, and credential exposure across controllers, models, and views.

What is the best way to detect hardcoded secrets and exposed debug settings before deploying Laravel?

Detect hardcoded secrets and exposed debug settings by running a full project security audit. This static analysis identifies accidental credential exposure and insecure configurations in your Laravel codebase before production deployment.

Can I automatically fix mass assignment and missing CSRF protection issues in Laravel?

Yes, you can automatically fix mass assignment and missing CSRF protection issues. The static analysis provides guided, interactive remediation suggestions for these vulnerabilities while maintaining developer oversight through confirmation prompts.

Does the security audit work with Blade templates to find unescaped output?

Yes, the security audit works with Blade templates by performing static analysis to find unescaped output. It actively scans views for XSS risks alongside checking controllers and models for broader security vulnerabilities.

How do I check my Laravel codebase for mass assignment vulnerabilities?

Check Laravel codebases for mass assignment vulnerabilities by running static analysis on models and controllers. The audit identifies unprotected attributes and provides interactive fix suggestions to remediate the security risks.