security-audit

Audit game codebases for security vulnerabilities and produce prioritized Markdown reports.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/nevesb/idol-agency-maker --skill security-audit-nevesb
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/nevesb/idol-agency-maker/tree/main/.claude/skills/security-audit
Command: npx skills add https://github.com/nevesb/idol-agency-maker --skill security-audit-nevesb

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill identifies and prioritizes security vulnerabilities across a game's codebase and assets, including save tampering, network exploits, input validation gaps, data exposure, and dependency risks, and converts findings into actionable remediation guidance.

Core Features & Use Cases

  • Comprehensive Audit Coverage: Evaluates save/serialization handling, network/multiplayer authority, input validation, data exposure, cheat vectors, and third-party dependency issues.
  • Prioritised Remediation Plan: Classifies findings by severity (CRITICAL/HIGH/MEDIUM/LOW), recommends fixes, and orders remediation tasks by impact and effort.
  • Gate and Workflow Integration: Produces a Markdown report for production/security and integrates with the Polish → Release gate; supports quick re-audits after fixes and prompts to write the final report to disk.

Quick Start

Run the security audit in full mode against the repository and request writing the prioritized report to production/security/security-audit-[date].md.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my game's codebase for security vulnerabilities before release?

Auditing a game's codebase for security vulnerabilities involves scanning save handling, networking, input validation, data exposure, and dependency supply chain. This Skill produces a prioritized Markdown report with severity classifications and remediation guidance.

What is the best way to prioritize game security risks like save tampering and network exploits?

Prioritizing game security risks involves classifying save tampering and network exploit findings by severity (CRITICAL/HIGH/MEDIUM/LOW). This approach orders remediation tasks by impact and effort, creating a structured plan to fix critical vulnerabilities first.

Does this game security audit cover third-party plugin risks and dependency scanning?

Yes, the game security audit covers third-party dependency supply chain risks. It scans your repository's dependencies and plugins to identify potential vulnerabilities, integrating these findings into the overall security assessment report.

Can I use this code audit for multiplayer network authority and input validation checks?

Yes, this code audit checks multiplayer network authority and input validation. It evaluates whether your game properly sanitizes user inputs and maintains server-side authority to prevent common cheat vectors in multiplayer environments.

How do I re-audit my game code after applying security fixes?

To re-audit game code after fixes, run the security audit in full mode against your updated repository. It supports quick re-audits and can write the final prioritized report directly to disk for production tracking.

What do I need to provide to run a game security audit on my repository?

Running a game security audit requires providing engine or language context, a source directory manifest, and the ability to run greps and analysis tasks. These inputs enable comprehensive vulnerability scanning across your codebase.