skills.rest
dorrio
dorrioCOMMUNITY
Explore all skills by this author →
GitHub

ln-621-security-auditor

Audit codebases for security vulnerabilities and provide remediation recommendations.

Updated Dec 11, 2025
Search Tags:#code review#security#vulnerability#xss#compliance#secrets#auditor
One-click install
npx skills add https://github.com/dorrio/sorteo-app-generator --skill ln-621-security-auditor-dorrio
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ln-621-security-auditor
Source: https://github.com/dorrio/sorteo-app-generator/tree/main/.agent/skills/ln-621-security-auditor
Command: npx skills add https://github.com/dorrio/sorteo-app-generator --skill ln-621-security-auditor-dorrio

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill proactively identifies and mitigates critical security vulnerabilities within your codebase, protecting against data breaches and system compromise.

Core Features & Use Cases

  • Vulnerability Detection: Scans for hardcoded secrets, SQL injection flaws, XSS vulnerabilities, insecure dependencies, and missing input validation.
  • Risk Assessment: Provides severity, location, and effort estimates for each finding.
  • Remediation Guidance: Offers actionable recommendations to fix identified issues.
  • Use Case: Before deploying a new feature, run the Security Auditor to ensure no sensitive API keys are exposed and that user inputs are properly sanitized, preventing potential attacks.

Quick Start

Run the ln-621-security-auditor skill to scan the current project for security vulnerabilities.

Frequently Asked Questions about ln-621-security-auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for security vulnerabilities like XSS and SQL injection?▼

To check for hardcoded secrets and insecure dependencies, you audit the codebase structure and patterns. The scan identifies exposed API keys and vulnerable packages, providing severity, location, and actionable recommendations for remediation.

What is the best way to check for hardcoded secrets and insecure dependencies before deployment?▼

To check for hardcoded secrets and insecure dependencies, you audit the codebase structure and patterns. The scan identifies exposed API keys and vulnerable packages, providing severity, location, and actionable recommendations for remediation.

Does the security audit provide remediation guidance for missing input validation?▼

Yes, the security audit provides remediation guidance for missing input validation. It analyzes code patterns to locate potential risks and offers actionable recommendations to fix identified issues.

Can I get severity and effort estimates for vulnerabilities found during code review?▼

You can get severity and effort estimates for vulnerabilities found during code review. The audit assesses risks like SQL injection and XSS, detailing the location and estimated effort required for each remediation.

What types of security vulnerabilities can be detected by analyzing code structure and patterns?▼

Analyzing code structure and patterns can detect security vulnerabilities including hardcoded secrets, SQL injection flaws, XSS vulnerabilities, insecure dependencies, and missing input validation.

Related Skills

Explore More Software Engineering Skills→
krrishverma1805-webkrrishverma1805-web

GSD Codebase Mapper

Analyze codebase structure, dependencies, patterns, and technical debt using PowerShell.

Community
Advanced
RifteoRifteo
30

remediation-planner

Generate prioritized remediation plans with effort estimates for security vulnerabilities.

Official
Advanced
cosmixcosmix
53

security-scan

Detect secrets, dependency vulnerabilities, and misconfigurations in codebases.

Community
Advanced
froggugugugufroggugugugu

security-scan

Execute SCA, SAST, DAST, and secret detection scans to report vulnerabilities.

Community
Advanced