security-audit

Locate private keys, API credentials, and exposure points in repositories and VPS configurations.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/Liquilab/Bottie --skill security-audit-liquilab
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/Liquilab/Bottie/tree/main/.claude/skills/security-audit
Command: npx skills add https://github.com/Liquilab/Bottie --skill security-audit-liquilab

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audits Bottie's security posture to identify leaked private keys, API credentials, and exposed attack surfaces before they can be exploited.

Core Features & Use Cases

  • Credential & Secrets checks: Detect exposed secrets in repos and configs.
  • Attack surface assessment: Map exposure points on VPS and services to reduce risk.
  • Hardening validation & reporting: Verify access controls and generate remediation-ready risk reports.

Quick Start

Run the security audit to identify leaks, surface gaps, and generate a risk report.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my codebase for exposed API credentials and private keys?

To audit exposed API credentials and private keys, the workflow scans private repositories, VPS configurations, and deployment workflows to locate leaked secrets and generate a remediation-ready risk report.

What is attack surface mapping for VPS hardening?

Attack surface mapping for VPS hardening identifies exposure points across your services and configurations, verifying access controls to reduce security risks before deployment.

How do I validate VPS hardening and access controls before deployment?

Validating VPS hardening involves checking access controls and configuration exposure points across deployment workflows to ensure security gaps are closed before going live.

Can I perform threat modeling and credential checks on private repositories?

Yes, credential checks and threat modeling can be applied directly to private repositories to discover leaked secrets, map attack surfaces, and receive actionable security recommendations.

What's the best way to generate a risk management report for infrastructure vulnerabilities?

Generating an infrastructure risk management report requires mapping the attack surface, validating VPS hardening, and summarizing discovered credential exposures into actionable remediation steps.