Trace untrusted-source data to sinks across Go, Ruby, and Shell codebases.
npx skills add https://github.com/alexfalkowski/bin --skill security-audit-alexfalkowski
Please help me install this Agent Skill. Skill: security-audit Source: https://github.com/alexfalkowski/bin/tree/main/skills/security-audit Command: npx skills add https://github.com/alexfalkowski/bin --skill security-audit-alexfalkowski
This Skill provides a structured, evidence-based framework for auditing code, scripts, and infrastructure to identify security vulnerabilities, unsafe patterns, and configuration gaps.
Use the security-audit skill to perform a comprehensive vulnerability review of the current repository changes.
High-intent search queries and answers about installing and using this skill.
To trace untrusted data flow during a code review, perform a source-to-sink analysis tracking inputs to dangerous sinks like shell execution. This identifies command injection and credential leakage risks by mapping data paths across the codebase.
Yes, you can audit Go HTTP handlers for vulnerabilities using language-specific guidance. It applies context-aware security checks to Go environments to identify validation gaps and configuration errors in your code.
The best way to identify configuration errors in shell scripts is a systematic security audit. It evaluates shell environments to detect unsafe patterns, configuration gaps, and validation vulnerabilities in your scripts.
Perform evidence-based risk assessment on pull requests by auditing code changes for security vulnerabilities and unsafe patterns. This provides a structured framework to verify new commits do not introduce risks like command injection.
Yes, this vulnerability audit works with Ruby codebases by applying specialized references. It ensures context-aware security checks to identify vulnerabilities and validation gaps specific to Ruby environments.
You need a systematic security audit when verifying repository changes for compliance and hardening. It identifies vulnerabilities by tracing data flow from untrusted sources to dangerous sinks, satisfying evidence-based risk assessment requirements.
harperaaDetect SQL injection and command injection vulnerabilities in AI-generated Python code.
elophantoCoordinate evidence collection and certification for AI agent production-hardening workflows.
WesleySmitsScan codebases for security vulnerabilities and unsafe patterns.
Serg28Automate security audits with semgrep, trivy, gitleaks, and dependency scanners.
