skills.rest
bketelsen
bketelsenCOMMUNITY
Explore all skills by this author →
Website𝕏@bketelsenGitHub

security-audit

Detect security vulnerabilities and governance violations across code, configurations, and deployed environments.

1|Updated Mar 12, 2026
Search Tags:#security#vulnerability#audit#compliance#governance#code scanning
One-click install
npx skills add https://github.com/bketelsen/truenas-mcp --skill security-audit-bketelsen
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/bketelsen/truenas-mcp/tree/main/.gaai/core/skills/cross/security-audit
Command: npx skills add https://github.com/bketelsen/truenas-mcp --skill security-audit-bketelsen

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the critical need for continuous security and governance oversight by automatically detecting vulnerabilities and compliance violations in code, configurations, and deployed environments.

Core Features & Use Cases

  • Vulnerability Detection: Scans code and configurations for common security flaws, secrets exposure, and unsafe patterns.
  • Compliance Validation: Checks adherence to project-specific security rules and governance policies.
  • Remediation Guidance: Provides actionable steps to fix identified issues.
  • Use Case: Integrate this Skill into your CI/CD pipeline to act as a security gate, ensuring that only code meeting defined security standards is deployed.

Quick Start

Run a security audit on the current project's codebase and configuration files.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan code for security vulnerabilities and exposed secrets?▼

Security vulnerability scanning automatically detects common flaws, secrets exposure, and unsafe patterns across code and configuration files. It analyzes your codebase to identify risks and provides actionable remediation guidance to fix them.

How do I check code compliance against project security rules?▼

Compliance validation checks your codebase against project-specific security rules and governance policies. It evaluates configurations and deployed environments to ensure adherence to defined standards before deployment.

Can I use a security audit as a gate in a CI/CD pipeline?▼

Yes, you can integrate this security audit into a CI/CD pipeline as a post-implementation security gate. It validates authentication and authorization flows to ensure only code meeting defined security standards is deployed.

What is the best way to detect governance violations in deployed environments?▼

Detecting governance violations requires periodic checks across deployed environments and configurations. This process validates compliance against project security rules and identifies unsafe patterns or unauthorized authentication flows.

Does this vulnerability detection work with existing configuration files?▼

Yes, vulnerability detection scans configuration files alongside code to identify security flaws and secrets exposure. It validates authentication and authorization flows without requiring additional dependencies or external components.

Why do I need a security audit if I already have code scanning?▼

A security audit extends beyond basic code scanning by validating governance policies, authentication flows, and compliance across deployed environments. It acts as a continuous oversight mechanism for post-implementation security gates.

Related Skills

Explore More Legal & Compliance Skills→
zircotezircote
1

security-baseline

Audit GitHub repositories for security gaps and implement baseline hardening.

Community
Advanced
aws-samplesaws-samples
6

aws-security-guard

Analyze AWS operation intents and infrastructure-as-code configurations for security risks.

Official
Advanced
SjdjdiejdrirhdkjejSjdjdiejdrirhdkjej

optimization-phase

Run post-implementation quality gates and generate reports before release.

Community
Advanced
M-Abdullah07M-Abdullah07
1

security-scanning-security-hardening

Coordinate specialized agents to scan and remediate application security vulnerabilities.

Community
Advanced