qa-security

Audit applications against OWASP Top 10 categories and generate prioritized vulnerability reports.

Updated Jan 19, 2026
One-click install
npx skills add https://github.com/rauly-1408/order-saas --skill qa-security-rauly-1408
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: qa-security
Source: https://github.com/rauly-1408/order-saas/tree/main/.claude/skills/qa-security
Command: npx skills add https://github.com/rauly-1408/order-saas --skill qa-security-rauly-1408

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps developers identify security vulnerabilities in applications before deployment by performing structured OWASP-based audits and highlighting remediation priorities.

Core Features & Use Cases

  • OWASP Security Auditing: Reviews applications against the OWASP Top 10 categories including access control, injection, authentication, and configuration risks.
  • Vulnerability Detection: Guides automated checks for dependency issues, exposed secrets, unsafe code patterns, and common web security flaws.
  • Use Case: Use this Skill before launching a production web application to generate a security report with findings, severity levels, and concrete fixes.

Quick Start

Use the qa-security skill to perform an OWASP security audit of my application and generate a prioritized vulnerability report.

Frequently Asked Questions about qa-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find security vulnerabilities in my application code before production?

Identify security vulnerabilities before production by running a structured OWASP-based audit. This evaluates your application against the OWASP Top 10 categories, checking for access control flaws, injection risks, and unsafe code patterns to generate a prioritized report.

What is an OWASP security audit and when do I need it?

An OWASP security audit systematically evaluates software against the OWASP Top 10 risks. You need it before launching a production web application to detect exposed secrets, dependency issues, and configuration vulnerabilities before deployment.

How do I perform a vulnerability assessment for production readiness?

Perform a vulnerability assessment for production readiness by applying systematic security scanning workflows. This checks dependencies and code patterns, outputting a vulnerability report with severity levels and concrete remediation recommendations.

Can this security audit check for exposed secrets and dependency issues?

Yes, this security audit guides automated checks specifically for dependency issues and exposed secrets. It also evaluates authentication risks and common web security flaws, providing actionable fixes for any detected vulnerabilities.

What is the best way to generate a remediation report for secure code analysis?

The best way to generate a remediation report for secure code analysis is using a structured OWASP audit. It systematically evaluates risks and outputs a prioritized vulnerability report detailing findings, severity levels, and concrete fixes.

Does this vulnerability detection work without specific security scanners?

Yes, this vulnerability detection works without specific security scanners because it has no external dependencies. It applies systematic OWASP evaluation practices directly to your codebase to identify security risks.