skills.rest
lyraarteltda
lyraarteltdaCOMMUNITY
Explore all skills by this author →
GitHub

security-audit

Audit codebases for OWASP Top 10 vulnerabilities and dependency risks via `npm audit`.

Updated Aug 23, 2026
Search Tags:#code review#security#vulnerability#owasp#dependencies#audit
One-click install
npx skills add https://github.com/lyraarteltda/MEGA-BRAIN-JARVIS-v2 --skill security-audit-lyraarteltda
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/lyraarteltda/MEGA-BRAIN-JARVIS-v2/tree/main/.fnd/skills/security-audit
Command: npx skills add https://github.com/lyraarteltda/MEGA-BRAIN-JARVIS-v2 --skill security-audit-lyraarteltda

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) and scripts (resource) components.

What problem does it solve?

This Skill identifies potential security vulnerabilities within a codebase by auditing against the OWASP Top 10 and other common security pitfalls.

Core Features & Use Cases

  • OWASP Top 10 Auditing: Checks for common vulnerabilities like broken access control, injection flaws, and cryptographic failures.
  • Dependency Vulnerability Scanning: Identifies high and critical vulnerabilities in project dependencies.
  • Use Case: Before deploying a new feature, run this audit to proactively identify and address security risks, ensuring the application's integrity and user data protection.

Quick Start

Use the security-audit skill to perform a security audit on the current project directory.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security audit to find vulnerabilities in my codebase?▼

Scanning dependencies for high and critical vulnerabilities is included in the audit. The tool runs npm audit to identify vulnerable components and integrates these findings into the final security report.

What is OWASP Top 10 codebase auditing?▼

OWASP Top 10 codebase auditing is the process of checking code for common security risks like broken access control, cryptographic failures, injection flaws, and misconfigurations. This audit identifies these flaws to ensure application integrity and user data protection.

Can I use this security audit for dependency vulnerability scanning?▼

Yes, you can use this security audit for dependency vulnerability scanning. The tool executes npm audit to identify high and critical vulnerabilities in project dependencies, incorporating the results into the comprehensive final security report.

Does the security audit check for SSRF and integrity failures?▼

Yes, the security audit checks for Server-Side Request Forgery (SSRF) and software integrity failures. It comprehensively analyzes the codebase for these specific vulnerabilities alongside authentication failures, logging failures, and insecure design components.

What's the best way to identify broken access control and injection flaws before deployment?▼

The best way to identify broken access control and injection flaws before deployment is to run a comprehensive security audit. This proactively analyzes the codebase against the OWASP Top 10, generating a detailed report of findings to address risks early.

Related Skills

Explore More Software Engineering Skills→
KamiJeongKamiJeong

speckit-docguard-generate

Generate canonical documentation from codebases using docguard-cli.

Community
Intermediate
MinhThang1009MinhThang1009
15

modernize-harden

Scan legacy code for security vulnerabilities and generate a reviewable remediation patch.

Community
Intermediate
xlelibertyxleliberty

security-pen-testing

Perform offensive security assessments with vulnerability scanning and penetration testing.

Community
Advanced
AnsteorraAnsteorra
6

security-audit

Perform static and dynamic security audits on the KMP application.

Official
Advanced