skills.rest
Mohamed-Elkahef
Mohamed-ElkahefCOMMUNITY
Explore all skills by this author →
GitHub

security-audit

Audit web applications and APIs for OWASP Top 10 vulnerabilities.

Updated Mar 5, 2026
Search Tags:#code review#OWASP#API security#remediation#security audit#web application security#vulnerability scanning
One-click install
npx skills add https://github.com/Mohamed-Elkahef/test-project --skill security-audit-mohamed-elkahef
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/Mohamed-Elkahef/test-project/tree/main/.claude/skills/security-audit
Command: npx skills add https://github.com/Mohamed-Elkahef/test-project --skill security-audit-mohamed-elkahef

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Manually identifying security vulnerabilities in web applications is time-consuming and error-prone, leaving apps exposed to attacks like data breaches, unauthorized access, and injection flaws that can damage user trust and compliance standing.

Core Features & Use Cases

  • Comprehensive Vulnerability Checks: Scans for common issues including XSS, CSRF, SQL injection, JWT token flaws, insecure data exposure, and missing security headers.
  • Structured Audit Workflow: Guides users through a 5-step process covering reconnaissance, code review, automated scanning, manual testing, and formal reporting with severity classification.
  • Use Case: A developer building a React + FastAPI order management app can use this skill to audit authentication flows, check for tokens passed in URLs, and validate input handling to prevent common attacks.

Quick Start

Use the security-audit skill to review your web application's authentication, authorization, and input validation logic for security vulnerabilities and receive prioritized remediation recommendations.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my web application for security vulnerabilities?▼

To audit web application security vulnerabilities, follow a structured 5-step workflow covering reconnaissance, code review, automated scanning, manual testing, and formal reporting with severity classification to identify issues like XSS and SQL injection.

What is the best way to check my API authentication logic for security flaws?▼

Checking API security for authentication flaws involves reviewing JWT token handling, validating authorization logic, and ensuring tokens are not passed in URLs to prevent unauthorized access and data breaches in full-stack web applications.

How does an OWASP Top 10 security audit workflow work?▼

An OWASP Top 10 security audit works by applying vulnerability pattern checks and structured review workflows to codebases, identifying common risks like insecure data exposure and missing security headers, then providing remediation guidance aligned with CWE standards.

Can I use this to scan a React and FastAPI application for input validation risks?▼

Yes, you can scan a React and FastAPI application to validate input handling, audit authentication flows, and check for cross-site request forgery risks to prevent common injection attacks and data exposure.

What common web application vulnerabilities should I look for during a code review?▼

During a security code review, look for common web application vulnerabilities including cross-site scripting, SQL injection, JWT token flaws, insecure data exposure, and missing security headers to ensure robust input validation.

How do I remediate data exposure risks in my API endpoints?▼

To remediate insecure data exposure risks in API endpoints, apply targeted remediation guidance aligned with CWE standards, prioritizing fixes for authorization logic and input validation flaws discovered during the vulnerability scanning phase.

Related Skills

Explore More Software Engineering Skills→
edulazaroedulazaro
12

lc:api-docs

Generate API documentation from Laravel routes, controllers, and form requests.

Community
Intermediate
amdmaxamdmax
2

security-review

Audit code changes against OWASP Top 10 and API Security Top 10 standards.

Community
Advanced
bcastelinobcastelino
2

vulnerability-scanner

Scan codebases and infrastructure for security vulnerabilities with Python scripts.

Community
Advanced
amano--amano--

burp-suite

Intercept HTTP traffic and test web applications for security vulnerabilities.

Community
Advanced