security-audit

Audit the ActivityTracking application for security vulnerabilities and generate a findings report.

Updated Sep 12, 2025

Search Tags:#authorization #authentication #dependency management #XSS #security audit #SQL injection #JWT

Ready to run

npx skills add https://github.com/ammonsd/ActivityTracking --skill security-audit-ammonsd

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/ammonsd/ActivityTracking/tree/main/skills/security-audit
Command: npx skills add https://github.com/ammonsd/ActivityTracking --skill security-audit-ammonsd

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps security teams and developers quickly identify vulnerabilities in the ActivityTracking application, including exposed secrets, weak authentication, and misconfigurations, before they reach production.

Core Features & Use Cases

Comprehensive security checks: JWT handling, password storage, RBAC validation, and data exposure checks.
Security headers, CORS, and dependencies review: Verify headers, cross-origin policies, and vulnerable libraries.
Remediation guidance: Generates prioritized findings and actionable steps for mitigation in code and configuration.

Quick Start

Run the security-audit against the ActivityTracking codebase to produce a findings report.
Review the report to identify exposed secrets, weak authentication, and injection flaws.
Implement fixes and re-run the audit to confirm improvements.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit an application for SQL injection and XSS vulnerabilities before production deployment?▼

Security audits detect exposed secrets, weak authentication, SQL injection, and XSS issues by enforcing checks for authentication controls, input validation, and secret management. They are applicable before production deployment, after major changes, and during periodic security reviews to identify vulnerabilities using a configurable checklist.

How do I check my application for weak JWT handling and RBAC authorization controls?▼

To check for weak JWT handling and RBAC authorization controls, perform a security audit that enforces authentication and authorization validation checks. This verifies password storage, RBAC configurations, and data exposure to produce actionable remediation steps for code and configuration.

Does a standard security audit verify CORS policies, security headers, and dependency hygiene?▼

Yes, a standard security audit verifies CORS policies, security headers, and dependency hygiene. It reviews cross-origin policies and vulnerable libraries, enforcing checks for dependency management and security headers to ensure misconfigurations are detected before reaching production.

What is the best way to detect secrets exposure and weak authentication in my codebase?▼

The best way to detect secrets exposure and weak authentication is to run a comprehensive security audit using scripted validation steps. This enforces secret management and authentication checks, generating a findings report that identifies exposed secrets and provides prioritized remediation guidance.

Can I use a security audit to enforce audit trail requirements and secure logging?▼

Yes, you can use a security audit to enforce audit trail requirements and secure logging. The audit applies a configurable checklist that validates secure logging practices and audit trail configurations, ensuring your application meets security compliance before deployment.