security-audit

To scan project dependencies for security vulnerabilities, this Skill analyzes package manifests across npm, pip, Go, and Rust to detect known exploits. It automates dependency scanning to identify risks before deployment.

Checking git history for hardcoded secrets involves scanning source code and commit logs to find exposed API keys and passwords. This Skill performs secret detection to prevent accidental credential leaks.

Auditing a codebase for OWASP Top 10 vulnerabilities requires analyzing code patterns for common security flaws like injection, broken authentication, and XSS. This Skill performs comprehensive pattern analysis to identify these risks.

You can verify SSL/TLS configurations and file permissions through an automated configuration audit. This Skill checks for SSL/TLS misconfigurations and improper file permissions to ensure infrastructure security.

Yes, performing a comprehensive security audit requires tools like npm, pip, openssl, and git to be installed. These dependencies enable the Skill to execute thorough vulnerability scanning, secret detection, and configuration checks.

Running a security audit before deploying a new service helps identify and mitigate vulnerabilities, protecting against data breaches and system compromise. It ensures dependencies, source code, and configuration files are secure.