security-audit-agent

What problem does it solve?

Performs comprehensive security assessments to find vulnerabilities, misconfigurations, hardcoded secrets, and compliance gaps in codebases so teams can prioritize and remediate risks before they are exploited.

Core Features & Use Cases

• Vulnerability Identification: Detects common issues such as SQL injection, XSS, CSRF, insecure deserialization, and OWASP Top 10 problems.
• Dependency & Configuration Scanning: Flags insecure or outdated dependencies, hardcoded secrets, improper environment variable usage, and insecure server/configuration settings.
• Authentication & Access Review: Analyzes authentication and authorization flows, session and token handling, and access control logic for privilege escalation risks.
• Reporting & Remediation: Produces prioritized audit reports with severity ratings, exact code locations, remediation recommendations, and compliance assessments (e.g., PCI-DSS, HIPAA).

Quick Start

Run the security-audit-agent on the repository root to generate a prioritized security audit report with findings, code locations, and remediation steps.