orthoplus-security-audit

What problem does it solve?

This Skill helps prevent security regressions in OrthoPlus Enterprise by detecting high-risk patterns such as secrets hardcoded in code and authentication tokens stored in localStorage.

Core Features & Use Cases

• Secret & token exposure detection: Scans for hardcoded secrets, authentication tokens in localStorage, and common token-handling anti-patterns that increase breach impact.
• Vulnerability pattern checks: Flags dangerous JavaScript constructs (like eval() and risky innerHTML usage), and identifies operational issues such as console.log remaining in production code.
• Auth enforcement validation: Detects cases where authentication checks appear to be disabled or bypassable, helping ensure intended access control remains intact.
• Use case: Before deploying a new OrthoPlus version, run the audit to catch secrets, XSS-prone token storage, and unsafe rendering patterns so the release passes internal security gates.

Quick Start

Ask the AI to run /security.audit to perform a security audit that detects secrets and token-handling vulnerabilities for the current OrthoPlus codebase.