security-audit

Scan code and configurations for security vulnerabilities and governance violations.

157|28|Updated Feb 7, 2026
One-click install
npx skills add https://github.com/Fr-e-d/GAAI-framework --skill security-audit-fr-e-d
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/Fr-e-d/GAAI-framework/tree/main/.gaai/core/skills/cross/security-audit
Command: npx skills add https://github.com/Fr-e-d/GAAI-framework --skill security-audit-fr-e-d

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill proactively identifies security vulnerabilities and governance violations within code, configurations, and deployed environments, ensuring a robust security posture.

Core Features & Use Cases

  • Vulnerability Scanning: Detects common security flaws and secrets exposure in code and configurations.
  • Compliance Validation: Checks adherence to project-specific security rules.
  • Remediation Guidance: Provides actionable steps to fix identified issues.
  • Use Case: After deploying a new feature, run this Skill to ensure no new security risks were introduced and that all security policies are met before going live.

Quick Start

Run a security audit on the current codebase and configuration files.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan code for security vulnerabilities and exposed secrets?

To scan code for security vulnerabilities, this Skill analyzes your codebase and configuration files to detect common security flaws and secrets exposure, generating a ranked report with actionable remediation steps.

How do I validate code compliance against project-specific security rules?

Validating code compliance requires security rules defined in your contexts/rules/ directory, which this Skill uses to check your deployed environments and configurations against governance policies and produce a compliance status report.

What is the best way to automate governance checks for code implementation?

Automating governance checks for code implementation involves enforcing security as a system rule; this Skill runs periodic validations against defined contexts/rules/ to identify violations and rank them by severity.

Do I need predefined security rules to perform a vulnerability audit?

Yes, predefined security rules are required to perform a vulnerability audit, as the Skill validates your code and configurations against rules stored in contexts/rules/ to determine compliance status and generate remediation guidance.

When should I run a security audit on my codebase?

You should run a security audit after deploying a new feature to ensure no new security risks were introduced, verifying that all security policies are met before going live and maintaining a robust security posture.

What does a security vulnerability report include after scanning configurations?

A security vulnerability report includes a ranked list of identified security flaws and governance violations, accompanied by actionable remediation steps to fix the issues and ensure compliance with your defined security rules.