Audit QoreDB codebase for security and QA risks with a structured checklist.
npx skills add https://github.com/QoreDB/QoreDB --skill qa-security-auditor
Please help me install this Agent Skill. Skill: qa-security-auditor Source: https://github.com/QoreDB/QoreDB/tree/main/.agent/skills/qa-security-auditor Command: npx skills add https://github.com/QoreDB/QoreDB --skill qa-security-auditor
This skill provides a security and QA auditing workflow for the QoreDB codebase, helping teams identify and mitigate risks before changes reach production.
Run qa-security-auditor on the repository to perform the security and QA audit and generate a concise report.
High-intent search queries and answers about installing and using this skill.
Automated security audits review your codebase for data exposure, dangerous operations, and permission risks before merges. This process checks sensitive logs, validates privileged actions, and ensures safe query usage to guarantee release readiness.
Tauri permissions reviews check that filesystem and shell access are restricted to only what is necessary. This security audit step prevents overly broad capabilities and ensures your application maintains strict access controls.
Security audits detect sensitive data exposure by applying structured checklist checks to logs and telemetry. This validation prevents accidental credential leaks by verifying that sensitive data is not written during operations.
Yes, you can validate SQL and NoSQL query safety during code reviews. The process checks for proper parameterization and validation to ensure safe query usage and prevent injection risks across the database layer.
Dangerous operations validation guards against accidental data loss and privileged actions. By running a pre-merge security audit, you can identify and mitigate these high-risk code changes before they reach production.
iludeIdentify flaws in plans and systems through a five-phase adversarial review framework.
VetCodersGenerate structured artifacts and findings-max audits for PR reviews.
DevHive1Orchestrate dependency, static analysis, and privacy dataflow scanners into prioritized reports.
OWASPDetect hardcoded secrets in source code and configuration files.
