skills.rest
gabi-agent
gabi-agentCOMMUNITY
Explore all skills by this author →
GitHub

security-audit

Scan codebases and infrastructure for security flaws and guide remediations.

Updated Feb 26, 2026
Search Tags:#vulnerability#owasp#ci#security-audit#secret-detection#dependency-scan#code-security
One-click install
npx skills add https://github.com/gabi-agent/openretro --skill security-audit-gabi-agent
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/gabi-agent/openretro/tree/main/skills/security-audit-toolkit
Command: npx skills add https://github.com/gabi-agent/openretro --skill security-audit-gabi-agent

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Scan, detect, and fix security issues in codebases and infrastructure to reduce risk and improve reliability.

Core Features & Use Cases

  • Dependency Vulnerability Scanning: Identify vulnerabilities in project dependencies across Node.js, Python, Go, and other ecosystems.
  • Secret Detection & OWASP Review: Locate hardcoded credentials, API keys, and common OWASP Top 10 weaknesses with guidance.
  • SSL/TLS Verification & Permissions Audits: Verify TLS configurations and enforce least-privilege file/directory permissions.
  • Remediation Guidance: Provide actionable steps to fix findings and improve secure coding practices.

Quick Start

Run a full security audit on the project using the recommended tooling to surface vulnerabilities and guide fixes.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan codebases for security vulnerabilities and hardcoded secrets?▼

To scan codebases for security vulnerabilities and hardcoded secrets, run an audit using standard tooling like npm audit, pip-audit, and trivy to locate dependency issues, API keys, and OWASP Top 10 weaknesses.

What is the best way to check for dependency vulnerabilities in Node.js, Python, and Go projects?▼

The best way to check for dependency vulnerabilities across multi-language projects is using ecosystem-specific scanners like npm audit, pip-audit, safety, and govulncheck to identify and guide remediations for vulnerable packages.

Can I integrate dependency and secret detection into CI pipelines?▼

Yes, you can integrate security audits into CI pipelines to automatically surface vulnerabilities, detect hardcoded credentials, and verify SSL/TLS configurations during the build process to improve reliability.

Does this security audit cover OWASP Top 10 checks and file permissions reviews?▼

Yes, this security audit covers OWASP Top 10 checks and enforces least-privilege file and directory permissions audits to locate common weaknesses and verify infrastructure hardening across your project.

How do I fix security flaws found during a dependency scan or code review?▼

To fix security flaws found during a dependency scan or code review, follow the actionable remediation guidance provided to update vulnerable packages, remove hardcoded secrets, and improve secure coding practices.

Related Skills

Explore More Software Engineering Skills→
apacheapache
79

magpie-dependency-audit

Scan project dependencies for known vulnerabilities and propose upgrades.

Official
Advanced
weirdgmeweirdgme
4

devsecops

Automate security integration across CI/CD pipelines with policy-as-code enforcement.

Community
Advanced
ntluong95ntluong95

Security Standards

Enforces security protocols including AES-256 encryption, TLS 1.3, Zero Trust, least privilege, SQLi/XSS prevention, dependency management, and secure authentication for building software.

Community
Advanced
skyasu2skyasu2
2

security-audit-workflow

Automate pre-deployment security audits for Next.js/Supabase CI pipelines.

Community
Advanced