security-audit

Identify and document security vulnerabilities in BIM's codebase with severity ratings.

6|2|Updated Apr 12, 2026
One-click install
npx skills add https://github.com/bitcoin-is-money/bim-app --skill security-audit-bitcoin-is-money
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/bitcoin-is-money/bim-app/tree/main/.claude/skills/security-audit
Command: npx skills add https://github.com/bitcoin-is-money/bim-app --skill security-audit-bitcoin-is-money

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

BIM security audits are essential to identify vulnerabilities that could lead to server takeover, data tampering, or payment hijacking, ensuring the system remains trustworthy for users.

Core Features & Use Cases

  • Systematic codebase scanning for vulnerabilities across server, application, and integration layers.
  • Threat modeling, penetration-testing mindset, and domain-specific payment security checks.
  • Use case: audit a new feature before release to surface risk vectors and propose mitigations.

Quick Start

Perform a full security audit of the BIM codebase and report actionable findings with severity ratings.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is a security audit for a BIM codebase?

A security audit for a BIM codebase systematically scans vulnerabilities across server, application, and integration layers to prevent server takeover, database tampering, and payment hijacking. It outputs a structured report with severity ratings and remediation guidance.

How do I audit code for payment hijacking vulnerabilities?

To audit code for payment hijacking vulnerabilities, apply a threat-modeling and penetration-testing mindset to the core components. This process validates findings and produces actionable remediation guidance with severity ratings to secure payment flows.

Can I use threat modeling to prevent server takeover in web authentication?

Yes, applying threat modeling to web authentication identifies vectors that could lead to server takeover. The audit focuses on three threat categories across core components, delivering a structured report of validated findings and severity ratings.

How do I document database tampering risks during a code review?

During a code review, document database tampering risks by applying a systematic audit methodology to the BIM codebase. This yields a validated findings report with severity ratings and actionable remediation steps for the identified vulnerabilities.

Does a penetration testing mindset work for auditing new feature releases?

Yes, using a penetration testing mindset is effective for auditing new feature releases. It surfaces risk vectors across server, application, and integration layers, providing a structured report with severity ratings and proposed mitigations before deployment.