security-audit

Audit security vulnerabilities in game and product codebases.

3|Updated Jun 3, 2026
One-click install
npx skills add https://github.com/Negentropy-Laby/Constitution-Driven-Development --skill security-audit-negentropy-laby
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/Negentropy-Laby/Constitution-Driven-Development/tree/main/.agents/skills/security-audit
Command: npx skills add https://github.com/Negentropy-Laby/Constitution-Driven-Development --skill security-audit-negentropy-laby

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audits codebases and deployments to identify security vulnerabilities, misconfigurations, and leakage risks across game and product surfaces, enabling teams to remediate before release.

Core Features & Use Cases

  • Multi-phase security audit across design, implementation, and deployment, aligned with game security and product security requirements.
  • Prioritized remediation plan with actionable steps for high-risk findings and dependencies.
  • Compliance-ready reporting: produces a Markdown report and a structured inventory of risks for gating and audits.

Quick Start

Run the audit workflow in full mode to scan all categories and generate the recommended security-audit report.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit codebases for security vulnerabilities before release?

To audit codebases for security vulnerabilities, run a full-mode security audit that scans directories like src/, assets/, and config files across six categories, then outputs a prioritized remediation plan and Markdown report to production/security/.

What is the best way to scan game code for input validation and network security risks?

Scanning game code for input validation and network security risks is done by running the targeted network or input audit modes, which analyze implementation gates and data exposure surfaces to identify misconfigurations specific to game security requirements.

Can I generate a compliance-ready security report for my product codebase?

Yes, you can generate a compliance-ready security report by running the audit workflow, which produces a structured inventory of risks and a dated Markdown file in production/security/ for gating and compliance reviews.

Does the security audit work with specific modes like save or quick scans?

The security audit supports full, network, save, input, and quick scanning modes, allowing you to target specific vulnerability categories or perform rapid checks across design, implementation, and deployment phases.

How does a security audit identify dependency risks and data exposure in game deployments?

A security audit identifies dependency risks and data exposure by applying a six-category systematic review across deployment gates, scanning relevant project files to detect leakage risks and misconfigurations before game release.

When do I need a full security audit versus a quick scan mode?

You need a full security audit for comprehensive pre-release checks across all categories, whereas a quick scan mode is suited for rapid, targeted vulnerability checks on specific areas like input validation or save files during active development.