Audit codebases, CI pipelines, and deployments against OWASP standards.
npx skills add https://github.com/houke/nexus-playground --skill security-audit-houke
Please help me install this Agent Skill. Skill: security-audit Source: https://github.com/houke/nexus-playground/tree/main/.github/skills/security-audit Command: npx skills add https://github.com/houke/nexus-playground --skill security-audit-houke
This Skill helps security teams and developers perform comprehensive OWASP-aligned security audits across their codebases, CI pipelines, and deployment configurations.
Run the security-audit skill in your project environment with the recommended tools to generate an initial security report.
High-intent search queries and answers about installing and using this skill.
To perform an OWASP-aligned security audit, run this skill in your project environment to detect OWASP Top 10 risks, misconfigurations, and insecure dependencies, generating a prioritized remediation plan and compliance-ready report.
Yes, you can detect leaked secrets and vulnerable dependencies by running this skill, which requires Node.js and utilizes tools like npm audit, npx secretlint, and npx snyk to identify cryptographic flaws and vulnerable components.
Yes, this security audit skill checks CI pipelines and cloud configurations to detect broken access control, insecure design patterns, and misconfigurations, providing actionable recommendations to improve secure coding practices.
Yes, you need Node.js with npm or yarn installed, along with tools like npx snyk, npx secretlint, and npm audit, to scan your repository for insecure design patterns and generate actionable security reports.
The best way to generate a compliance-ready security report is to run this skill against your new project, which analyzes code repositories and build pipelines to produce a prioritized remediation plan aligned with OWASP standards.
Your codebase security audit requires specific Node.js tools because it leverages npm audit, npx secretlint, and npx snyk to accurately identify vulnerable components, leaked secrets, and cryptographic flaws across your deployment configurations.
DexploarerScan dependency manifests and lockfiles for known vulnerabilities.
jeremylongshoreScan codebases, dependencies, and configurations for security vulnerabilities and CVEs.
devendrapratapsinghScan application code for vulnerabilities and hardcoded secrets.
skyasu2Automate pre-deployment security audits for Next.js/Supabase CI pipelines.
