skills.rest
krishnakanthb13
krishnakanthb13COMMUNITY
Explore all skills by this author →
Website𝕏@KrishnaKanthB13GitHub

security_audit

Audit codebases for OWASP Top 10 vulnerabilities and generate SECURITY.md reports.

41|10|Updated Jan 24, 2026
Search Tags:#security#codebase#owasp#secrets-detection#auth-checks#injection-prevention
One-click install
npx skills add https://github.com/krishnakanthb13/antigravity_global_skills --skill security-audit-krishnakanthb13
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security_audit
Source: https://github.com/krishnakanthb13/antigravity_global_skills/tree/main/security_audit
Command: npx skills add https://github.com/krishnakanthb13/antigravity_global_skills --skill security-audit-krishnakanthb13

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audits identify and remediate security vulnerabilities in codebases (secrets, insecure patterns, and auth gaps) to reduce risk and protect data.

Core Features & Use Cases

  • Secrets Detection: Scan for API keys, tokens, and credentials across the repository.
  • Injection & Auth Checks: Inspect for vulnerable patterns, ensure parameterization, and validate access controls.
  • Security Reporting: Generate or update SECURITY.md with findings, remediation steps, and verification status.

Quick Start

Run a full security sweep on the target directory to surface OWASP-aligned issues and generate a SECURITY.md report.

Frequently Asked Questions about security_audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan a codebase for secrets and OWASP Top 10 vulnerabilities?▼

Run a security audit on the target directory to surface OWASP-aligned issues across multiple files. This detects exposed secrets, injection flaws, and authentication gaps, generating a SECURITY.md report with findings and remediation steps.

What is a security audit and how does it detect exposed credentials in a repository?▼

A security audit identifies and remediates risks by scanning repositories for insecure patterns. It detects exposed credentials like API keys and tokens across multiple files, reducing risk and protecting sensitive data.

Can I audit a large repository for authentication and authorization gaps?▼

Yes, you can audit repositories of any size for authentication and authorization gaps. The security audit inspects access controls and validates parameterization across the entire codebase to ensure secure patterns are followed.

How do I generate a SECURITY.md report with remediation steps for codebase findings?▼

Generate or update a SECURITY.md file by running a security audit on your codebase. The report includes audit findings, specific remediation steps, and verification records to track the resolution of detected vulnerabilities.

What's the best way to prevent injection flaws during a codebase security sweep?▼

The best way to prevent injection flaws during a security sweep is to inspect the codebase for vulnerable patterns and ensure proper parameterization. The audit identifies these flaws and provides guidance to remediate them in the SECURITY.md report.

Related Skills

Explore More Software Engineering Skills→
selfagencyselfagency

security-review

Analyze codebases for security vulnerabilities and generate patch proposals.

Community
Advanced
goffitygoffity

security-auditor

Audit JavaScript, TypeScript, Python, and Go code for OWASP Top 10 risks and hardcoded secrets.

Community
Intermediate
matteocervellimatteocervelli
25

security-scanner

Scan codebases for secrets, vulnerable dependencies, and insecure patterns.

Community
Advanced
Weihong-LiuWeihong-Liu
6

security-review

Audit code for OWASP Top 10 vulnerabilities, hardcoded secrets, and unsafe patterns.

Community
Advanced