skills.rest
Consiliency
ConsiliencyOFFICIAL
Explore all skills by this author →
WebsiteGitHub

security-audit

Scan codebases for OWASP vulnerabilities and generate prioritized remediation reports.

8|1|Updated Jul 11, 2025
Search Tags:#OWASP#security#vulnerability#remediation#static-analysis#code-audit
One-click install
npx skills add https://github.com/Consiliency/treesitter-chunker --skill security-audit-consiliency
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/Consiliency/treesitter-chunker/tree/main/.ai-dev-kit/skills/security-audit
Command: npx skills add https://github.com/Consiliency/treesitter-chunker --skill security-audit-consiliency

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps developers and reviewers identify security vulnerabilities in codebases by applying OWASP patterns and common CWE rules, enabling proactive risk mitigation.

Core Features & Use Cases

  • Pattern-based scanning for SQL injection, shell injection, bare excepts, and hardcoded secrets across languages (Python, TypeScript, etc.).
  • Severity rating & remediation guidance to prioritize fixes and provide practical remediation steps.
  • Workflow integration with code reviews and CI pipelines to generate actionable findings and suggested fixes.

Quick Start

Run the security-audit skill on a target code repository to scan for vulnerabilities and generate a concise report with prioritized fixes. For example, point the skill at a Python project and request an executable audit report.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify SQL injection and shell injection vulnerabilities in my code?▼

Security audit scanning detects SQL injection, shell injection, and other code vulnerabilities using OWASP patterns and CWE rules. Run the audit on your codebase to flag insecure constructs like unparameterized queries and unsanitized command execution, then apply provided remediation guidance.

Can I scan Python and TypeScript projects for security flaws?▼

Yes, the security audit tool works across languages including Python and TypeScript. It applies consistent OWASP-based vulnerability detection patterns to identify hardcoded secrets, bare excepts, injection risks, and other common flaws regardless of language.

How do I integrate security scanning into my CI pipeline?▼

Security audit integrates into CI pipelines and code-review workflows to flag vulnerabilities automatically. Run it during build or review stages to generate actionable findings with severity ratings and remediation steps before code reaches production.

What security patterns does the audit detect?▼

The audit detects SQL injection, shell injection, bare excepts, hardcoded secrets, and vulnerabilities mapped to common CWEs. Each finding includes severity scoring and practical remediation guidance based on OWASP best practices.

Do I need specialized tools to understand and fix the audit results?▼

No. The audit generates a concise report with severity ratings and remediation suggestions that fit directly into developer workflows. Each finding includes actionable guidance to help developers prioritize and implement fixes.

Related Skills

Explore More Software Engineering Skills→
fcastrillofcastrillo

rai-discover-start

Detect project type, languages, and key directories into work/discovery/context.yaml.

Community
Intermediate
jpoleyjpoley
50

security-fixer

Generate secure patches for code vulnerabilities and output unified diffs.

Community
Intermediate
voidrotvoidrot

sast-configuration

Configure SAST tools like Semgrep, CodeQL, and SonarQube for CI/CD pipelines.

Community
Intermediate
MonumentalSystemsMonumentalSystems
17

vulnerability-scanning

Scan application code, dependencies, and container images for security vulnerabilities.

Official
Advanced