skills.rest
albertdobmeyer
albertdobmeyerCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-audit

Audit codebases and infrastructure for security issues using dependency scanners and secret detection.

2|1|Updated Mar 2, 2026
Search Tags:#security#owasp#audit#compliance#tls#secret-detection#vulnerability-scanning
One-click install
npx skills add https://github.com/albertdobmeyer/opentrapp --skill security-audit-albertdobmeyer
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/albertdobmeyer/opentrapp/tree/main/workloads/skills/skills/security-audit
Command: npx skills add https://github.com/albertdobmeyer/opentrapp --skill security-audit-albertdobmeyer

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps you find and prioritize security weaknesses in codebases and infrastructure before they become incidents. It is designed for reviewing dependencies, secrets, authentication logic, transport security, permissions, and common web application risks.

Core Features & Use Cases

  • Dependency Risk Checks: Review package ecosystems for known vulnerabilities with language-specific audit tools.
  • Secret and Credential Detection: Spot hardcoded API keys, passwords, private keys, and tokens in source or history.
  • Secure Code Review: Inspect projects for OWASP-style issues such as injection flaws, XSS, broken auth, unsafe SSL/TLS settings, and permissive CORS.
  • Operational Audits: Evaluate file permissions, repository hygiene, and certificate behavior for infrastructure and deployment safety.

Quick Start

Ask the security-audit skill to review the repository for secrets, dependency vulnerabilities, SSL and TLS weaknesses, permission problems, and insecure coding patterns.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for hardcoded secrets and API keys?▼

To scan for hardcoded secrets and API keys, you can run grep-based secret checks across your source code and history. This detects credentials like passwords, private keys, and tokens before they ship.

What is the best way to audit dependencies for known vulnerabilities in npm and Python projects?▼

Auditing dependencies for known vulnerabilities uses language-specific tools like npm audit, pip-audit, and govulncheck. These scanners review package ecosystems to identify and prioritize at-risk libraries.

How do I check my code for OWASP vulnerabilities like XSS and injection flaws?▼

Checking for OWASP vulnerabilities involves secure code analysis to inspect projects for injection flaws, XSS, broken authentication, unsafe SSL/TLS settings, and permissive CORS configurations.

Can I verify SSL and TLS certificate behavior and settings without unsafe defaults?▼

Yes, you can verify SSL and TLS settings using OpenSSL inspection to evaluate certificate behavior. This evaluates transport security without relying on unsafe defaults.

Does this security audit support operational checks for file permissions and repository hygiene?▼

Yes, operational audits evaluate file permissions, repository hygiene, and certificate behavior. This ensures infrastructure and deployment safety across common project types.

Related Skills

Explore More Software Engineering Skills→
gtgspotgtgspot

oss-review

Classify open-source licenses and map obligations to deployment models.

Community
Advanced
augustoheissaugustoheiss

agency-security-engineer

Identify and remediate application security risks in web and cloud-native systems.

Community
Advanced
SKY-lvSKY-lv

security-testing-agent

Scan code, dependencies, and configurations for security vulnerabilities.

Community
Advanced
oborchersoborchers
28

security-monitoring-from-day-one

Deploy managed cloud security services for threat detection and compliance scanning.

Community
Advanced