skills.rest
iuliandita
iulianditaCOMMUNITY
Explore all skills by this author →
GitHub

security-audit

Audit application codebases, configurations, and CI/CD pipelines for security vulnerabilities.

2|Updated Apr 6, 2026
Search Tags:#security#vulnerability#owasp#audit#sast#supply chain
One-click install
npx skills add https://github.com/iuliandita/skills --skill security-audit-iuliandita
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/iuliandita/skills/tree/main/skills/security-audit
Command: npx skills add https://github.com/iuliandita/skills --skill security-audit-iuliandita

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill addresses the complexity of maintaining application security by providing a structured, multi-pass audit that identifies vulnerabilities, secrets, and supply chain risks before they reach production.

Core Features & Use Cases

  • Multi-Pass Analysis: Combines automated SAST, secret scanning, and dependency auditing with manual review patterns.
  • OWASP Alignment: Maps all findings directly to the OWASP Top 10:2025 and Agentic Top 10:2026 standards.
  • Use Case: Use this skill to perform a comprehensive security gate check on a new repository, ensuring that hardcoded credentials, vulnerable dependencies, and insecure agentic patterns are identified and remediated before deployment.

Quick Start

Run the security-audit skill on the current directory to generate a prioritized vulnerability report.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security audit on my codebase to find hardcoded secrets and dependency CVEs?▼

Run the security-audit skill on your current directory to perform a multi-pass scan that identifies hardcoded credentials, dependency CVEs, injection flaws, and generates a prioritized vulnerability report.

What is the best way to check my application for OWASP Top 10 compliance before deployment?▼

An automated multi-pass security audit maps all identified vulnerabilities directly to OWASP Top 10:2025 and Agentic Top 10:2026 standards, ensuring your application meets compliance before production.

Can I use automated SAST and supply chain scanning together in a single security review?▼

Yes, a comprehensive security audit combines automated SAST, secret scanning, and dependency auditing with manual review patterns to harden supply chains and identify configuration risks.

Does this security audit cover CI/CD pipeline configurations and agentic-specific risks?▼

Yes, the audit performs a comprehensive review of application codebases, configurations, and CI/CD pipelines, specifically targeting insecure agentic patterns and supply chain vulnerabilities.

When do I need to perform a multi-pass security audit on my repository?▼

You need a multi-pass security audit when setting up a new repository or preparing for deployment to ensure hardcoded credentials, vulnerable dependencies, and injection flaws are remediated early.

Related Skills

Explore More Software Engineering Skills→
salmanabdurrahmansalmanabdurrahman

supply-chain-cicd

Analyze CI/CD pipeline configurations for injection vectors, secret exposure, and access controls.

Community
Advanced
MichelMokbelMichelMokbel

security-audit

Scan software projects for CVEs, injection flaws, and hardcoded secrets.

Community
Advanced
AradotsoAradotso
11

npm-security-best-practices

Harden npm, pnpm, and Bun installs against supply-chain attacks.

Official
Advanced
summarybotngsummarybotng
2

QE Security Compliance

Automate security auditing, vulnerability scanning, and compliance validation against OWASP, SOC2, and GDPR.

Official
Advanced