skills.rest
askferret
askferretCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-audit

Automate full-codebase security audits across SAST, OWASP Top 10, SCA, and Zero Trust frameworks.

Updated Jun 3, 2026
Search Tags:#security audit#code security#vulnerability scanning#security report#static code analysis
One-click install
npx skills add https://github.com/askferret/automatic-waffle --skill security-audit-askferret
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/askferret/automatic-waffle/tree/main/skills/security-audit
Command: npx skills add https://github.com/askferret/automatic-waffle --skill security-audit-askferret

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill performs a comprehensive security audit on your entire codebase, identifying and reporting vulnerabilities and suggesting remediation plans.

Core Features & Use Cases

  • Full-Codebase Security Audit: Performs static code analysis, checks for common vulnerabilities, and suggests fixes.
  • Automated Report Generation: Generates a detailed report with prioritized findings and a remediation plan.
  • Customizable Trigger Words: Trigger the audit using specific keywords such as "security audit" or "full security review".

Quick Start

Run the security-audit skill to start the security audit for your codebase.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate a full-codebase security audit for my software project?▼

To automate a full-codebase security audit, this Skill performs static code analysis across your project to identify and prioritize vulnerabilities, outputting a comprehensive security report with suggested remediation plans.

What's the best way to check my codebase for OWASP Top 10 vulnerabilities?▼

The best way to check for OWASP Top 10 vulnerabilities is running an automated security audit that scans your codebase against the OWASP framework, generating a prioritized report of security findings.

How does static code analysis identify security vulnerabilities in a codebase?▼

Static code analysis identifies security vulnerabilities by scanning the source code across SAST, OWASP Top 10, SCA, and Zero Trust frameworks to detect patterns and weaknesses, then suggesting targeted remediation steps.

Can I trigger an automated security report generation using specific keywords?▼

Yes, you can trigger automated security report generation by using customizable trigger words like "security audit" or "full security review" to initiate the codebase scan and output a detailed findings report.

Does the security audit include a remediation plan for identified vulnerabilities?▼

Yes, the security audit includes a remediation plan by generating a detailed report with prioritized findings and triggering follow-up remediation workflows to resolve the identified code vulnerabilities.

Related Skills

Explore More Software Engineering Skills→
bailynlovebailynlove
1

requesting-code-review

Automate pre-commit code verification with static security scanning and quality gates.

Community
Advanced
LerianStudioLerianStudio
205

ops-security-audit

Automate infrastructure security audits with phased scanning and compliance mapping.

Official
Advanced
zebbernzebbern
4.5k

Security Scanning Tools

Automate security scanning workflows for network and vulnerability assessment.

Community
Advanced
wyattowalshwyattowalsh
4

security-scanner

Scan codebases for SAST, secrets, and dependency vulnerabilities.

Community
Advanced