security-audit

Identify OWASP Top 10 risks, secrets exposure, and dependency issues in Node.js/NestJS codebases.

13|1|Updated Jun 28, 2023
One-click install
npx skills add https://github.com/jovicon/nestjs-clean-architecture-event-driven-template --skill security-audit-jovicon
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/jovicon/nestjs-clean-architecture-event-driven-template/tree/main/.claude/skills/security-audit
Command: npx skills add https://github.com/jovicon/nestjs-clean-architecture-event-driven-template --skill security-audit-jovicon

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Auditors and developers struggle to identify and remediate security weaknesses across codebases, from OWASP Top 10 risks to secrets leakage and insecure dependencies.

Core Features & Use Cases

  • OWASP Top 10 (2021) analysis covering common vulnerabilities and recommended mitigations.
  • Secrets detection and secure handling of credentials, keys, and tokens.
  • Dependency security checks and guidance for remediation and hardening.
  • Input validation and authentication/authorization review patterns to enforce secure design.
  • Use Case: Prepare security reports for code reviews, remediation planning, and compliance artifacts.

Quick Start

Run a comprehensive security assessment on your repository to generate a remediation-ready report.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security audit on a Node.js or NestJS backend?

Run a security audit on your Node.js or NestJS backend to identify vulnerabilities and generate a remediation-ready report. The assessment covers OWASP Top 10 risks, secrets exposure, and dependency issues with actionable code snippets.

What is the best way to detect exposed secrets and credentials in my codebase?

Detecting exposed secrets involves scanning your codebase for hardcoded credentials, keys, and tokens. This security audit identifies secrets leakage and provides secure handling recommendations to protect sensitive authentication data.

How do I check my API dependencies for security vulnerabilities?

Checking API dependencies for vulnerabilities involves analyzing your project's package tree for known security flaws. The audit performs dependency security checks and provides guidance for remediation and hardening.

Can I use this to enforce input validation and authentication review patterns?

Yes, you can use this audit to enforce secure design through input validation and authentication/authorization review patterns. It analyzes your codebase to identify weaknesses and recommends mitigations for common vulnerabilities.

Does the security audit provide concrete file paths for fixing OWASP Top 10 risks?

Yes, the security audit provides concrete file paths and code snippets for fixing OWASP Top 10 risks. It delivers actionable remediation steps directly mapped to your codebase to resolve identified vulnerabilities.

Can I generate compliance artifacts and security reports for CI/CD pipelines?

Yes, you can generate compliance artifacts and security reports by applying this security assessment across your CI/CD pipelines. It produces remediation-ready documents covering vulnerabilities, secrets, and dependencies for code reviews.