Scan dependencies and custom code for security vulnerabilities.
npx skills add https://github.com/zapabob/Skills --skill sec-audit
Please help me install this Agent Skill. Skill: sec-audit Source: https://github.com/zapabob/Skills/tree/main/registry/skills/sec-audit/variants/cursor Command: npx skills add https://github.com/zapabob/Skills --skill sec-audit
This Skill addresses the critical need for robust security in software development by automating the process of identifying and remediating vulnerabilities within codebases.
Run a security audit on the current project to identify and report any vulnerabilities.
High-intent search queries and answers about installing and using this skill.
To scan your codebase for security vulnerabilities, this Skill performs comprehensive auditing by checking dependencies for known flaws and analyzing custom code for SQL injection and XSS. It delivers detailed reports with actionable remediation steps.
Yes, you can get automated patching suggestions for SQL injection and XSS flaws. The audit generates actionable code snippets designed to fix identified security issues directly within your custom code.
The best way to audit dependencies for known vulnerabilities before merging a branch is to run a proactive security scan on the feature branch. This identifies outdated or vulnerable libraries to ensure the codebase remains secure.
Yes, the security audit provides remediation steps for outdated libraries. Its dependency analysis identifies vulnerable libraries and generates detailed reports containing specific steps to resolve the detected security risks.
During a custom code audit, the security scanner detects common flaws like SQL injection and cross-site scripting (XSS). It analyzes your source code against these known vulnerability patterns to pinpoint risks.
Scanning custom code for security vulnerabilities targets common flaws like SQL injection and XSS, meaning it focuses on known patterns rather than business logic errors. It provides patching suggestions but requires developer review for implementation.
highflame-aiAnalyze repository structures and dependency manifests to draft ai-factory configuration files and domain experts.
joi-fairshareRun typecheck, lint, and test suites to produce structured bug reports with health metrics.
pwarnockAutomates security scanning for vulnerabilities, secrets, and misconfigurations in projects.
kivo360Mitigate security vulnerabilities in CI/CD pipelines using OWASP Top 10 and SAST/DAST workflows.
