skills.rest
goodstoriesworld
goodstoriesworldOFFICIAL
Explore all skills by this author →
WebsiteGitHub

security-audit

Audit codebases for OWASP Top 10 vulnerabilities and generate structured reports.

Updated Mar 27, 2026
Search Tags:#security#vulnerability#owasp#audit#code-review#security-headers#secrets-scan
One-click install
npx skills add https://github.com/goodstoriesworld/coco-agent-skills --skill security-audit-goodstoriesworld
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/goodstoriesworld/coco-agent-skills/tree/main/vendored/security-audit
Command: npx skills add https://github.com/goodstoriesworld/coco-agent-skills --skill security-audit-goodstoriesworld

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audits codebases for security vulnerabilities across the OWASP Top 10 and beyond, producing structured vulnerability reports with severity ratings, PoC descriptions, and actionable remediation steps.

Core Features & Use Cases

  • Reconnaissance-guided security assessment covering entry points, data flows, trust boundaries, sensitive assets, and dependencies.
  • OWASP Top 10 checklist walkthrough with guidance on identifying and remediating common vulnerabilities, including authentication and authorization issues, misconfigurations, and insecure design.
  • Comprehensive reporting including severity ratings, attack descriptions, remediation steps, and a plain-text security audit report ready for stakeholder review.

Quick Start

Run a security audit on your codebase to generate a structured vulnerability report.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit code for security vulnerabilities across the OWASP Top 10?▼

Security audits cover the OWASP Top 10 by performing reconnaissance on entry points and data flows, applying an explicit vulnerability checklist, validating security headers, and scanning for secrets to produce a structured report.

What's the best way to perform a pre-deployment security audit on my codebase?▼

Pre-deployment audits assess codebases by mapping trust boundaries, sensitive assets, and dependencies against the OWASP Top 10 checklist to generate a detailed vulnerability report with severity ratings and actionable remediation steps.

Can I include proof of concept descriptions and severity ratings in a code review security report?▼

Security reports include severity ratings, attack descriptions, proof of concept details, and remediation steps. The output is a plain-text audit document structured for stakeholder review.

Does the security audit cover API endpoint assessments and secrets management?▼

Yes, security audits apply to API endpoint assessments, authentication and authorization reviews, and secrets management by performing targeted reconnaissance and secrets scans across the codebase.

How do I validate security headers and identify misconfigurations during a code review?▼

Code reviews validate security headers and identify misconfigurations by applying an OWASP Top 10 checklist walkthrough that examines authentication issues, insecure design, and trust boundaries.

What is reconnaissance-guided security assessment for codebases?▼

Reconnaissance-guided security assessment maps entry points, data flows, trust boundaries, sensitive assets, and dependencies to guide the vulnerability scan and produce structured findings.

Related Skills

Explore More Software Engineering Skills→
hammadurrehman2006hammadurrehman2006

codebase-discovery-expert

Map large codebases and produce compact Markdown summaries of modules and entry points.

Community
Advanced
Marwan78888Marwan78888
16

security-reviewer

Identify security vulnerabilities in code, dependencies, and infrastructure.

Community
Advanced
matteocervellimatteocervelli
25

security-scanner

Scan codebases for secrets, vulnerable dependencies, and insecure patterns.

Community
Advanced
AnsteorraAnsteorra
6

security-audit

Perform static and dynamic security audits on the KMP application.

Official
Advanced