security-agent

To scan for OWASP Top 10 vulnerabilities, this Skill performs static analysis across your codebase to detect injection flaws, hardcoded secrets, and misconfigurations. It enforces active remediation by applying secure coding practices and auto-fixing detected issues.

Remediating hardcoded secrets and injection vulnerabilities involves static analysis to detect SQL, XSS, and command injection flaws. This Skill applies active remediation by auto-fixing the detected code changes or marking complex items for manual review.

Auditing security configurations like CSP, CORS, and HSTS requires a pre-deployment security review. This Skill evaluates your configurations against secure coding practices and applies hardening measures to ensure deployment readiness.

Checking for vulnerable dependencies is fully supported through automated dependency auditing. The Skill identifies at-risk packages, checks them against known vulnerabilities, and applies active remediation or flags them for manual review.

Harden authentication and authorization code automatically by running a security audit. The Skill analyzes your access control implementations, applies active remediation to enforce secure boundaries, and outputs the necessary code changes.

Automated security remediation for CWE Top 25 flaws applies static analysis to auto-fix common issues, but complex vulnerabilities may be marked for manual review. It requires secure coding practices to accurately mitigate injection and authorization flaws.