skills.rest
asgarovf
asgarovfCOMMUNITY
Explore all skills by this author →
𝕏@asgarovfGitHub

security-audit

Audit code and infrastructure for security vulnerabilities and generate a structured report.

23|2|Updated Jan 17, 2026
Search Tags:#code review#security#owasp#audit#dependency scan#vulnerabilities
One-click install
npx skills add https://github.com/asgarovf/locusai --skill security-audit-asgarovf
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/asgarovf/locusai/tree/main/skills/security-audit
Command: npx skills add https://github.com/asgarovf/locusai --skill security-audit-asgarovf

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps identify and mitigate security vulnerabilities in code and infrastructure, ensuring applications are hardened against common threats.

Core Features & Use Cases

  • Vulnerability Scanning: Detects hardcoded secrets, injection flaws (SQL, XSS, Command), and path traversal issues.
  • Dependency Auditing: Checks for known vulnerabilities in project dependencies.
  • Configuration Review: Assesses security of authentication, authorization, CORS, and production configurations.
  • Use Case: Before deploying a new feature, run a security audit to proactively find and fix potential weaknesses, preventing breaches and protecting user data.

Quick Start

Run a comprehensive security audit on the current codebase, checking for secrets, injection vulnerabilities, and dependency issues.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for hardcoded secrets and injection vulnerabilities?▼

To scan code for security vulnerabilities, this audit tool uses grep and git to detect hardcoded secrets, SQL injection, XSS, and path traversal issues, then generates a structured report of the findings.

What is the best way to check my project dependencies for known security vulnerabilities?▼

Checking dependencies for known vulnerabilities is handled by utilizing package managers to audit project dependencies, identifying outdated or compromised packages and outputting the results in a structured report.

Can I use this security audit to review my production configuration and CORS settings?▼

Yes, you can use the security audit to review production configurations, assessing the security of authentication, authorization, and CORS settings to ensure your infrastructure is hardened against threats.

Does the security audit check for OWASP Top 10 issues in my code?▼

Yes, the security audit checks for OWASP Top 10 issues in your code, scanning for common security flaws like injection vulnerabilities and secrets exposure to proactively identify weaknesses before deployment.

Do I need to install external dependencies to run a security audit on my codebase?▼

No external dependencies are required to run the security audit, as it relies on standard tools like grep, git, and package managers already available in your environment to scan for common security flaws.

Related Skills

Explore More Software Engineering Skills→
Dmccarty30Dmccarty30
4

using-git-worktrees

Create isolated Git worktrees with dependency installation and baseline tests.

Community
Intermediate
williamzujkowskiwilliamzujkowski
17

nosql

Mitigate security vulnerabilities from insecure NoSQL patterns in database environments.

Community
Intermediate
voidrotvoidrot

sast-configuration

Configure SAST tools like Semgrep, CodeQL, and SonarQube for CI/CD pipelines.

Community
Intermediate
JosiahSiegelJosiahSiegel
51

defender-for-devops

Integrate Microsoft Defender for DevOps into Azure Pipelines for automated security scanning.

Community
Advanced