security-audit

Name: security-audit
Availability: InStock
Author: Cuemby

Automate security assessments of codebases and infrastructure against OWASP Top 10.

Updated Feb 17, 2026

Search Tags:#code review #security #vulnerability #owasp #audit #compliance

Ready to run

npx skills add https://github.com/cuemby/cloud-marketplace --skill security-audit-cuemby

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/cuemby/cloud-marketplace/tree/main/.claude/skills/security-audit
Command: npx skills add https://github.com/cuemby/cloud-marketplace --skill security-audit-cuemby

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the critical need for robust security by providing a structured workflow to identify and mitigate vulnerabilities in code and infrastructure.

Core Features & Use Cases

Comprehensive Security Review: Covers OWASP Top 10, dependency vulnerabilities, secrets detection, and more.
Automated Scanning: Integrates tools for dependency audits and secrets detection.
Use Case: Before deploying a new feature, run a 'Quick Scan' to ensure no critical vulnerabilities or exposed secrets are present. For a major release, perform a 'Full Audit' to ensure all security best practices are met.

Quick Start

Initiate a security audit by running the 'Quick Scan' command for Node.js applications.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan my codebase for OWASP Top 10 vulnerabilities?▼

To scan for OWASP Top 10 vulnerabilities, this Skill automates security assessments of your codebase by executing comprehensive checks against industry standards. It identifies access control flaws, injection flaws, and misconfigurations through a multi-phase process.

What is the best way to detect exposed secrets in a Node.js application?▼

Detecting exposed secrets in a Node.js application is best handled by running the integrated Quick Scan command. This automated scanning phase identifies exposed credentials and critical vulnerabilities before you deploy a new feature.

How does a dependency audit identify vulnerable components in my code?▼

A dependency audit identifies vulnerable components by scanning your project dependencies against known vulnerability databases. This multi-phase process flags outdated or compromised packages and provides remediation guidance for the findings.

Can I perform a full security audit for major release compliance?▼

Yes, you can perform a Full Audit to ensure major release compliance with security best practices. This comprehensive review covers cryptography, access control, injection flaws, and vulnerable components, delivering detailed reports and remediation steps.

Do I need any external tools to get remediation guidance for code vulnerabilities?▼

You do not need external tools to get remediation guidance for code vulnerabilities. The Skill provides detailed reports and remediation steps for critical, high, medium, and low severity findings directly after completing the automated security assessment.