Audit sensitive codebases for critical vulnerabilities across auth, payments, and webhooks.
npx skills add https://github.com/aleister1102/skills --skill security-aleister1102
Please help me install this Agent Skill. Skill: security Source: https://github.com/aleister1102/skills/tree/main/security Command: npx skills add https://github.com/aleister1102/skills --skill security-aleister1102
Helps security teams perform focused audits of sensitive codebases, surfacing critical vulnerabilities and verification gaps before deployment.
Load the security-audit templates and begin a scoped scan of the target repository.
High-intent search queries and answers about installing and using this skill.
To audit a codebase for security vulnerabilities, apply static audit and runtime verification phases to sensitive workflows like auth, payments, and secrets. This process identifies critical vulnerabilities and compliance gaps before deployment.
Triage authentication and secret exposure flaws by applying standardized report templates to categorize findings by risk. This supports an iterative remediation workflow to verify closure and compliance for targeted security checks.
Yes, this security audit process specifically targets webhook interactions, file handling, auth, and payment workflows. It applies targeted checks to identify insecure deserialization and input handling vulnerabilities in these sensitive areas.
Iterative remediation for code vulnerabilities follows a findings, fixes, and re-check cycle to verify closure. This workflow ensures that identified security flaws are systematically resolved and compliance is maintained.
Standardized templates are needed to perform a static security audit because they support structured risk triage. Loading these templates allows you to scope scans and produce actionable fixes for sensitive codebases.
Static code audits for sensitive codebases have limitations in identifying runtime vulnerabilities, which require runtime verification phases. Static analysis alone may miss complex insecure deserialization or dynamic input handling flaws.
freire19Create audit documentation and map codebase structure for pre-audit context.
shuu5Automate iterative GitHub PR fix, verify, and warning-fix cycles.
Davidenk0vVerify Resend webhooks and retrieve email content with attachments.
DevHive1Orchestrate dependency, static analysis, and privacy dataflow scanners into prioritized reports.
