security-audit

Scan software projects for CVEs, injection flaws, and hardcoded secrets.

Updated Dec 12, 2025
One-click install
npx skills add https://github.com/MichelMokbel/RMS-1 --skill security-audit-michelmokbel
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/MichelMokbel/RMS-1/tree/main/.agents/skills/security-audit
Command: npx skills add https://github.com/MichelMokbel/RMS-1 --skill security-audit-michelmokbel

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires @claude-flow/cli, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This skill addresses the risk of security vulnerabilities in software by automating the detection of common coding flaws and dependency issues before they reach production.

Core Features & Use Cases

  • Vulnerability Scanning: Detects input validation issues, path traversal, SQL injection, and XSS vulnerabilities.
  • Dependency Management: Scans project dependencies for known CVEs and provides auto-remediation paths.
  • Use Case: Use this skill during the development of new API endpoints or authentication modules to ensure that secure coding patterns are enforced and no hardcoded secrets are introduced.

Quick Start

Run the security audit skill to perform a full scan of the current codebase for vulnerabilities and dependency issues.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for security vulnerabilities and hardcoded secrets?

To scan for security vulnerabilities and hardcoded secrets, you can run an automated security audit that targets authentication, data handling, and API workflows to enforce secure coding standards. It detects injection flaws, path traversal, and exposed credentials.

What's the best way to check project dependencies for known CVEs?

Checking project dependencies for known CVEs requires an automated vulnerability scanning process that inspects your dependency tree. This security audit scans dependencies to identify known vulnerabilities and provides auto-remediation paths to resolve them.

Can I use automated vulnerability detection for new API endpoints?

Yes, you can use automated vulnerability detection during the development of new API endpoints. The security audit targets API integration workflows to enforce secure coding patterns and identifies input validation issues and XSS vulnerabilities.

Does security auditing detect SQL injection and path traversal vulnerabilities?

Security auditing detects SQL injection and path traversal vulnerabilities through comprehensive code analysis. The automated scanning process targets input validation issues to ensure production-grade security compliance before deployment.

Do I need @claude-flow/cli to run a security audit?

Yes, you need the @claude-flow/cli dependency installed to execute the security audit skill. This prerequisite allows the advanced automated scanning scripts to run comprehensive vulnerability detection on your software projects.

When should I run an automated vulnerability scan during development?

You should run an automated vulnerability scan when developing new authentication modules or API endpoints to ensure secure coding patterns are enforced. This prevents hardcoded secrets and common coding flaws from reaching production.