skills.rest
ntluong95
ntluong95COMMUNITY
Explore all skills by this author →
WebsiteGitHub

Security Audit

Probe Node, Go, Dart, Java, Python, and Rust codebases for security vulnerabilities.

Updated Mar 7, 2026
Search Tags:#security#vulnerability#audit#secrets#cve#pentest
One-click install
npx skills add https://github.com/ntluong95/agent-skills-statistics --skill security-audit-ntluong95
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Security Audit
Source: https://github.com/ntluong95/agent-skills-statistics/tree/main/.github/skills/common/security-audit
Command: npx skills add https://github.com/ntluong95/agent-skills-statistics --skill security-audit-ntluong95

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill proactively identifies and helps remediate critical security vulnerabilities within your codebase, protecting against data breaches and system compromise.

Core Features & Use Cases

  • Vulnerability Scanning: Detects hardcoded secrets, PII in logs, SQL injection risks, and insecure dependencies across multiple programming languages.
  • Security Auditing: Compares authentication coverage against exposed routes and flags infrastructure misconfigurations in Dockerfiles.
  • Use Case: Before deploying your application, run this Skill to ensure no API keys are accidentally committed to your repository and that all sensitive endpoints are properly secured.

Quick Start

Run a comprehensive security audit on the current project directory.

Frequently Asked Questions about Security Audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for hardcoded secrets and API keys?▼

To scan for hardcoded secrets and API keys, this Skill performs adversarial probing across your codebase to identify committed credentials, PII in logs, and insecure dependencies before deployment.

Does this security audit tool support Python and Rust codebases?▼

Yes, this security audit tool supports Python and Rust codebases, alongside Node, Go, Dart, and Java, detecting injection vulnerabilities, authentication gaps, and insecure dependencies across all these languages.

What is the best way to check for SQL injection risks and authentication coverage gaps?▼

The best way to check for SQL injection risks and authentication coverage gaps is running a comprehensive vulnerability assessment that compares exposed routes against secured endpoints to flag missing protections.

Can I detect insecure dependencies and Dockerfile misconfigurations during a security audit?▼

Yes, you can detect insecure dependencies and Dockerfile misconfigurations during a security audit, as the Skill executes shell commands for dependency auditing and flags infrastructure misconfigurations.

How do I run a vulnerability assessment on my current project directory?▼

To run a vulnerability assessment on your current project directory, simply execute the Skill to perform comprehensive scanning for hardcoded secrets, data leakage in logs, and authentication coverage gaps.

Do I need shell access to scan for insecure dependencies and CVEs?▼

Yes, you need shell access because vulnerability scanning and dependency auditing require executing shell commands to probe Node, Go, Dart, Java, Python, and Rust codebases for insecure dependencies and CVEs.

Related Skills

Explore More Software Engineering Skills→
lengo0951lengo0951

ck:security-scan

Scan codebases for vulnerabilities, hardcoded secrets, and dependency issues.

Community
Advanced
GaryOcean428GaryOcean428

security-audit

Detect secrets, insecure dependencies, and vulnerable patterns in codebases.

Community
Advanced
mlvpatelmlvpatel
1

code-reaper

Identify and remediate security weaknesses in source code via static analysis.

Community
Advanced
dapperdiversdapperdivers
1

run-full-scan

Orchestrate reconnaissance, vulnerability scanning, source auditing, and report generation for penetration tests.

Community
Advanced