security-appsec-auditor

Identify and remediate OWASP Top 10 vulnerabilities in application code.

Updated Nov 26, 2025
One-click install
npx skills add https://github.com/guiledo/dotfiles --skill security-appsec-auditor
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-appsec-auditor
Source: https://github.com/guiledo/dotfiles/tree/main/opencode/.config/opencode/skills/security-appsec-auditor
Command: npx skills add https://github.com/guiledo/dotfiles --skill security-appsec-auditor

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

The AppSec & Security Auditor helps developers enforce zero-trust security during coding and prevents OWASP Top 10 vulnerabilities from entering production.

Core Features & Use Cases

  • Enforce zero-trust security and prevent common vulnerabilities (OWASP Top 10) in application code.
  • Audit code and workflow for security best practices during development, reviews, and deployments.
  • Provide actionable guidance and remediation steps to fix insecure patterns in web and API projects.

Quick Start

Audit your codebase for OWASP Top 10 vulnerabilities and implement secure coding practices across the project.

Frequently Asked Questions about security-appsec-auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent OWASP Top 10 vulnerabilities in application code?

To prevent OWASP Top 10 vulnerabilities in application code, apply zero-trust security principles during development and code reviews to identify and remediate common flaws before deployment.

How do I audit my codebase for secure coding and secret management?

Audit your codebase for secure coding and secret management by enforcing input validation and safe data handling through a structured workflow that targets insecure patterns in web and API projects.

Does this security auditor support API projects and web applications?

Yes, this security auditor supports API projects and web applications by providing actionable guidance and remediation steps to fix insecure coding patterns across both environments.

What is the best way to enforce zero-trust security during feature development?

The best way to enforce zero-trust security during feature development is to integrate security audits into your workflow, applying OWASP guidelines to secure authentication and data handling.

Can I use this for code reviews to find insecure authentication patterns?

Yes, you can use this for code reviews to find insecure authentication patterns, as it identifies vulnerabilities and provides actionable remediation steps for common flaws.

When should I perform threat modeling and security audits on my code?

You should perform threat modeling and security audits during code reviews, feature development, and pre-deployment to ensure zero-trust security and prevent common vulnerabilities from entering production.