security-audit

Scan source files, configurations, and dependencies for security vulnerabilities.

Updated May 7, 2026
One-click install
npx skills add https://github.com/mrvonkalus/claude-skill-pack-free --skill security-audit-mrvonkalus
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/mrvonkalus/claude-skill-pack-free/tree/main/security-audit
Command: npx skills add https://github.com/mrvonkalus/claude-skill-pack-free --skill security-audit-mrvonkalus

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Scans codebases for vulnerabilities, exposed secrets, misconfigured auth, and common attack vectors to help teams identify risks before deployment.

Core Features & Use Cases

  • Secret exposure scanning
  • Injection vulnerability checks
  • Auth & access control auditing
  • Dependency vulnerability assessment
  • Configuration security checks

Quick Start

Run a security audit against your codebase to generate a prioritized findings report.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for security vulnerabilities and exposed secrets?

A codebase security audit identifies vulnerabilities by scanning source files, configurations, and dependencies. It surfaces exposed secrets, injection risks, and misconfigurations, producing severity-rated findings to guide remediation.

What does a dependency vulnerability assessment check for in a web application?

A dependency vulnerability assessment checks for known CVEs in your project's dependencies. It evaluates libraries and services across languages to identify vulnerable packages, helping teams eliminate risks before deployment.

Can I audit authentication and access control gaps across different programming languages?

Yes, auth and access control auditing applies to web applications, libraries, and services across languages. It enchecks auth and ACL verification to surface access control gaps and security misconfigurations.

What is the best way to find misconfigurations and injection risks in source files?

Finding misconfigurations and injection risks requires security configuration validation and source file scanning. The audit enforces comprehensive checks to surface injection vulnerabilities and configuration security issues, generating a prioritized findings report.

Does a codebase security scan work for libraries and services, or only web applications?

Codebase security scanning is applicable to web applications, libraries, and services across languages. It evaluates source files and dependencies to identify attack vectors and vulnerabilities across different project types.