security-audit

Audit code changes for security vulnerabilities with OWASP Top 10 checks.

Updated Apr 1, 2026
One-click install
npx skills add https://github.com/hpsgd/claude-marketplace --skill security-audit-hpsgd
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/hpsgd/claude-marketplace/tree/main/plugins/practices/security-compliance/skills/security-audit
Command: npx skills add https://github.com/hpsgd/claude-marketplace --skill security-audit-hpsgd

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps developers identify and remediate security vulnerabilities in code changes or targeted code areas before deployment.

Core Features & Use Cases

  • Scope-aware security auditing across designated files, directories, or git diffs.
  • Systematic data-flow mapping and OWASP Top 10 coverage to guide remediation.
  • Formal findings reports with actionable recommendations and evidence.

Quick Start

Provide the path to the target code and run a security audit to generate a findings report.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security audit on a git diff before deployment?

To perform a security audit on a git diff, provide the diff path to scope the analysis. The audit applies OWASP Top 10 checks and data-flow mapping to generate a formal findings report with actionable remediation evidence.

What is the best way to check code changes for OWASP Top 10 vulnerabilities?

Checking code changes for OWASP Top 10 vulnerabilities requires a systematic security audit of targeted files or directories. This process maps data flows and enforces structured checks to identify critical flaws in auth, data access, and API boundaries.

Can I run a vulnerability analysis on specific directories instead of the entire codebase?

Yes, you can run vulnerability analysis on specific directories instead of the entire codebase. The security audit is scope-aware, allowing you to target designated files, directories, or git diffs to identify and remediate security flaws early.

How do I map data flows to find business logic security flaws?

Mapping data flows to find business logic security flaws is achieved through a structured security audit workflow. This process systematically traces data access and API boundaries, enforcing evidence-based remediation to fix vulnerabilities early.

Does static analysis for secure DevOps cover infrastructure and API boundary vulnerabilities?

Static analysis for secure DevOps covers infrastructure and API boundary vulnerabilities by performing a comprehensive security audit. It emphasizes critical vulnerabilities across auth, data access, and business logic to generate formal findings reports.

How do I get an evidence-based remediation report after a code security audit?

To get an evidence-based remediation report after a code security audit, run the structured workflow on your targeted code. The process outputs a formal findings report containing actionable recommendations and evidence for identified vulnerabilities.