security-audit

Detect API keys, insecure storage, network weaknesses, and privacy issues.

Updated Jul 24, 2024
One-click install
npx skills add https://github.com/jasonwilmot/little-riddle --skill security-audit-jasonwilmot
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/jasonwilmot/little-riddle/tree/main/.claude/skills/security-audit
Command: npx skills add https://github.com/jasonwilmot/little-riddle --skill security-audit-jasonwilmot

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Focused security scans identify API keys, insecure storage, network weaknesses, permission issues, and privacy manifest gaps across mobile and web applications.

Core Features & Use Cases

  • Secrets & API Keys: Scan for hardcoded credentials and sensitive tokens in common file types.
  • Data Storage & Privacy: Verify secure storage practices and privacy manifest compliance.
  • Network & Input Validation: Check TLS usage, network call hygiene, and input validation gaps.
  • Use Case: Integrate into CI/CD to produce a security checklist before release.

Quick Start

Run the security-audit against your codebase to generate a prioritized report.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for hardcoded API keys and secrets?

You can scan for hardcoded API keys and secrets by running a security audit against your codebase, which checks common file types for sensitive tokens and generates a prioritized report. It enforces checks across secrets, storage, and network categories.

Can I integrate a security checklist into my CI/CD pipeline before release?

Yes, you can integrate this security audit into CI/CD pipelines to produce a structured checklist and scoring rubric before release. It verifies release readiness across iOS, Android, and web platforms by checking TLS usage and privacy manifests.

What is the best way to check for insecure storage and privacy manifest gaps in mobile apps?

The best way to check for insecure storage and privacy manifest gaps is to perform a focused security audit. It verifies secure storage practices and privacy manifest compliance across iOS and Android mobile apps during code reviews.

Does this security audit work with both web and mobile platforms like iOS and Android?

Yes, this security audit works with iOS, Android, and web platforms. It detects network weaknesses, improper permissions, and input validation gaps across these platforms to ensure comprehensive release readiness.

How do I detect network weaknesses and input validation gaps during a code review?

To detect network weaknesses and input validation gaps during a code review, run a focused security audit. It checks TLS usage, network call hygiene, and input validation gaps, providing a structured checklist to identify vulnerabilities.

What categories does a security audit cover when checking for vulnerabilities?

A security audit covers vulnerabilities across five categories: secrets, storage, network, input validation, and privacy. It provides a structured checklist and scoring rubric to identify security gaps before release.