security-audit

Name: security-audit
Availability: InStock
Author: AGMO

Analyze a codebase for security findings across four domains without making changes.

4|1|Updated Mar 19, 2026

Search Tags:#codebase #reporting #secrets #supply-chain #ci-cd #security-audit #owasp-top-10

Ready to run

npx skills add https://github.com/AGMO-Inc/agmo-everywhere --skill security-audit-agmo-inc

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/AGMO-Inc/agmo-everywhere/tree/main/skills/security-audit
Command: npx skills add https://github.com/AGMO-Inc/agmo-everywhere --skill security-audit-agmo-inc

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Provides a structured, read-only security audit across repository domains to surface findings without modifying the code.

Core Features & Use Cases

Domain-based checks for secrets, supply chain, CI/CD, and OWASP Top 10 with actionable findings.
Ideal for pre-deploy security reviews, risk assessment, and compliance readiness.
Use case: run the audit on a new repo to generate a findings report for security posture.

Quick Start

Run the security-audit skill to generate a findings report for the current repository.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I run a read-only security audit on my codebase?▼

To run a read-only security audit, execute the skill against your local repository to surface findings across four domains without modifying any code. It analyzes your codebase and produces a structured findings report for architects to review.

What is the best way to check my repository for secrets and supply chain risks?▼

The best way to check for secrets and supply chain risks is using a domain-based security audit that scans your local repository. This process evaluates your codebase against a domain checklist to identify exposed secrets and dependency vulnerabilities.

Does this security audit tool modify my codebase during analysis?▼

No, this security audit tool does not modify your codebase during analysis. It performs a strictly read-only review of the repository to surface security findings without making any changes to your files.

Can I use this audit for OWASP Top 10 compliance checks before deployment?▼

Yes, you can use this audit for OWASP Top 10 compliance checks before deployment. It is specifically designed for pre-release reviews, risk assessments, and compliance readiness by analyzing your local repository against a domain checklist.

How does a domain checklist work for CI/CD security assessments?▼

A domain checklist works for CI/CD security assessments by systematically evaluating your pipeline configuration against known security criteria. The audit uses this checklist to identify misconfigurations and vulnerabilities across your CI/CD domain.