skills.rest
grafana
grafanaOFFICIAL
Explore all skills by this author →
Website𝕏@grafanaGitHub

secure

Audit codebases for security violations across frontend, backend, MCP transport, and dependencies.

19|31|Updated May 29, 2025
Search Tags:#security#audit#npm-audit#frontend-security#backend-security#go-modules#mcp-transport
One-click install
npx skills add https://github.com/grafana/grafana-pathfinder-app --skill secure-grafana
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: secure
Source: https://github.com/grafana/grafana-pathfinder-app/tree/main/.cursor/skills/secure
Command: npx skills add https://github.com/grafana/grafana-pathfinder-app --skill secure-grafana

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security auditing across frontend, backend, MCP transport, and dependencies to surface actionable findings with remediation.

Core Features & Use Cases

  • Frontend: detects risks defined in frontend security rules and reports with concrete remediation.
  • Backend: validates security concerns including token handling, URL allowlists, and dependency advisories.
  • MCP transport: audits transport-related safeguards and input validation.
  • Dependency audit: runs npm audit and Go module advisories to surface known vulnerabilities.

Quick Start

Review the findings and implement the recommended remediation without editing source files.

Frequently Asked Questions about secure

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit codebases for security violations without modifying the source files?▼

Security audit scans codebases and PR diffs to surface violations across frontend, backend, and MCP transport without editing files. It reports findings with concrete remediation steps while adhering to read-only constraints.

Can I check npm and Go module dependencies for known vulnerabilities?▼

Yes, dependency audit runs npm audit and Go module advisories to surface known vulnerabilities. It validates backend security concerns including token handling and URL allowlists alongside dependency risks.

Does this security audit work on PR diffs or does it require a full working-tree scan?▼

Security audit applies to both PR diffs and working-tree scans. It analyzes touched files across frontend, backend, and MCP transport layers to surface violations with concrete remediation.

What frontend security rules are checked during the codebase audit?▼

Frontend security audit detects risks defined in canonical frontend-security rules and reports them with concrete remediation steps. It references standard rules to validate frontend code against known risks.

How does MCP transport security audit validate input and safeguards?▼

MCP transport audit validates transport-related safeguards and input validation. It analyzes MCP transport files in PR diffs or working-tree scans to surface security violations with concrete remediation.

What is the best way to audit backend security concerns like token handling and URL allowlists?▼

Backend security audit validates token handling, URL allowlists, and dependency advisories. It analyzes backend files touched in PR diffs or working-tree scans to surface violations with concrete remediation.

Related Skills

Explore More Software Engineering Skills→
amotion-aiamotion-ai

test

Run backend pytest suites and Vite frontend builds to detect regressions.

Official
Intermediate
ferdiangunawanferdiangunawan
6

audit-security

Identify security vulnerabilities and data exposure in source code.

Community
Advanced
jd-opensourcejd-opensource
299

pentest-supply-chain

Audit dependencies, CI/CD pipelines, and build artifacts for supply chain risks.

Official
Advanced
Atrium-HermesAtrium-Hermes

Vuln Scanner

Identify real security vulnerabilities in trending repositories and route disclosures.

Community
Advanced