skills.rest
ArtemioPadilla
ArtemioPadillaCOMMUNITY
Explore all skills by this author →
Website𝕏@artemiopadillaGitHub

security-audit

Identify and remediate security risks across code, dependencies, and infrastructure.

3|Updated Feb 14, 2026
Search Tags:#security#owasp#audit#compliance#code-review#dependency#secret-scan
One-click install
npx skills add https://github.com/ArtemioPadilla/agent-triforce --skill security-audit-artemiopadilla
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/ArtemioPadilla/agent-triforce/tree/main/.claude/skills/security-audit
Command: npx skills add https://github.com/ArtemioPadilla/agent-triforce --skill security-audit-artemiopadilla

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Identifies and mitigates security risks across code, dependencies, and infrastructure to reduce release risk and protect systems.

Core Features & Use Cases

  • OWASP Top 10 checks: evaluate security posture across core categories like authentication, authorization, data protection, and input validation.
  • Secrets and dependency scans: detect exposed keys, tokens, passwords, and vulnerable libraries across the repository.
  • Architecture and design reviews: identify insecure design patterns and misconfigurations with actionable remediation steps.
  • Compliance and risk reporting: produce findings aligned with governance requirements and CVE tracking.

Quick Start

Run the security-audit skill against the target repository to start a comprehensive security assessment.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security audit on my codebase before a release?▼

Run a security audit against your codebase to identify and remediate risks across code, dependencies, and infrastructure. It checks OWASP Top 10 categories, scans for exposed secrets, and tracks dependency CVEs before release.

What does an OWASP Top 10 code review cover for vulnerability detection?▼

An OWASP Top 10 code review evaluates your security posture across authentication, authorization, data protection, and input validation. It detects insecure design patterns and misconfigurations, providing actionable remediation steps.

How can I scan my repository for exposed secrets and vulnerable dependencies?▼

Scan your repository for exposed secrets and vulnerable dependencies to detect keys, tokens, passwords, and library CVEs. The process identifies risks across code and infrastructure configurations with structured tracking.

Can I use this security audit for CI pipelines and deployment configurations?▼

Yes, the security audit is applicable to CI pipelines and deployment configurations. It is especially useful during pre-release or after major changes to reduce release risk and protect systems.

What is the best way to generate compliance and risk reports after a security scan?▼

Generate compliance and risk reports by running a structured security audit that produces findings aligned with governance requirements. It tracks dependency CVEs and architecture risks for auditable remediation.

When should I run a comprehensive security audit on my infrastructure?▼

Run a comprehensive security audit during pre-release phases or after major changes to your codebase. It identifies misconfigurations and security risks across infrastructure, ensuring systems are protected before deployment.

Related Skills

Explore More Software Engineering Skills→
EojEdredEojEdred

security-hardening

Scan code and configurations for security vulnerabilities and replay risks.

Community
Intermediate
jaem1n207jaem1n207
18

security-audit

Detects vulnerabilities and provides actionable security recommendations for your codebase.

Community
Advanced
dandudzidandudzi
2

sast-configuration

Automate SAST tool selection, configuration, and CI/CD integration.

Community
Advanced
angelapaiaangelapaia
13

web-security-audit

Automates authorized black-box web security audits and generates HTML vulnerability reports with remediation guidance.

Community
Advanced