skills.rest
agentpoet
agentpoetCOMMUNITY
Explore all skills by this author →
Website𝕏@armytanky85GitHub

Security Audit

Audits code, databases, and environments for vulnerabilities and insecure configurations.

Updated Aug 23, 2026
Search Tags:#code review#security#vulnerability#audit#compliance#devsecops
One-click install
npx skills add https://github.com/agentpoet/Agentic-Coding-System-Self-Improving-Framework --skill security-audit-agentpoet
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Security Audit
Source: https://github.com/agentpoet/Agentic-Coding-System-Self-Improving-Framework/tree/main/.claude/skills/security-audit
Command: npx skills add https://github.com/agentpoet/Agentic-Coding-System-Self-Improving-Framework --skill security-audit-agentpoet

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill identifies and helps fix security vulnerabilities in code, databases, and environments, protecting your project from potential breaches.

Core Features & Use Cases

  • Code Security Analysis: Checks for hardcoded secrets, input validation issues, and common web vulnerabilities like SQL injection and XSS.
  • Database Security: Verifies Row Level Security (RLS) and secure handling of credentials.
  • Environment Hardening: Ensures secrets are managed securely via environment variables and not exposed.
  • Dependency Auditing: Runs npm audit to find and update vulnerable packages.
  • Use Case: Before deploying a new feature, run a security audit to ensure no sensitive API keys were accidentally committed and that the database is properly secured against common attacks.

Quick Start

Run a security audit by searching for hardcoded secrets, checking .gitignore, verifying RLS, running npm audit, and checking CORS configuration.

Frequently Asked Questions about Security Audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for hardcoded secrets and credentials?▼

A security audit checks your code and environment configurations to identify hardcoded credentials, ensuring sensitive data is managed securely via environment variables and properly ignored in version control.

What is the best way to check my database for SQL injection and access control flaws?▼

A security audit verifies database security by checking for SQL injection vulnerabilities, improper access controls, and ensuring Row Level Security (RLS) is properly configured to protect sensitive data records.

How do I find and update vulnerable npm dependencies before deployment?▼

You can find vulnerable packages by running a dependency audit using npm audit, which identifies known security flaws in your project dependencies and helps update them to secure versions before deployment.

Does this security audit check for CORS configuration and XSS vulnerabilities?▼

Yes, the security audit checks for common web vulnerabilities like Cross-Site Scripting (XSS) and verifies your Cross-Origin Resource Sharing (CORS) configuration to prevent insecure cross-domain access to your application.

Can I use this to ensure compliance with DevSecOps best practices for my environment?▼

Yes, the audit performs environment hardening and checks for insecure configurations to ensure your project complies with security best practices and DevSecOps requirements before releasing new features.

Related Skills

Explore More Software Engineering Skills→
gkganesh12gkganesh12
1

gk-deploy

Detect services, patch source code, and generate deployment configs for multiple platforms.

Community
Advanced
YanCheng-goYanCheng-go
3

security-review

Identify security risks across codebases, dependencies, secrets, and Supabase RLS policies.

Community
Advanced
jassicsjassics
6

secure-pipeline

Review and secure CI/CD pipelines with automated security scanning gates.

Community
Advanced
mohitmishra786mohitmishra786

security

Scan code, dependencies, containers, and cloud configurations for security vulnerabilities.

Community
Advanced