ln-621-security-auditor

Security auditing scans your codebase for hardcoded secrets, SQL injection, XSS, insecure dependencies, and missing input validation using pattern-matching rules. The Skill returns structured findings with severity levels, locations, estimated remediation effort, and actionable recommendations to guide your fixes.

The audit detects hardcoded secrets, SQL injection risks, cross-site scripting (XSS) vulnerabilities, insecure dependencies, and missing input validation across your TypeScript/JavaScript codebase. Each finding includes severity classification and remediation guidance.

Yes. The Skill scans TypeScript and JavaScript codebases using Glob and Grep pattern matching to identify security gaps. It integrates into the ln-620 coordinator pipeline and outputs findings with compliance scoring for risk assessment workflows.

The audit produces structured JSON findings containing vulnerability category, severity level, code location, estimated effort to fix, and remediation recommendations. It also computes a security compliance score to feed downstream risk assessment and reporting systems.

The audit applies rule-based pattern checks to detect missing input validation across your codebase. It flags locations where user input is not properly sanitized or validated, helping prevent injection attacks and related vulnerabilities.

The compliance score reflects your codebase's overall security posture based on detected vulnerabilities across all scanned categories. It provides a quantified metric for tracking security improvements and integrating into higher-level risk assessment workflows.