skills.rest
open-platform-model
open-platform-modelOFFICIAL
Explore all skills by this author →
GitHub

security-audit

Audits Go CLI projects for vulnerabilities and generates a severity-ranked report.

Updated Dec 8, 2025
Search Tags:#security#cli#audit#golang#kubernetes#vulnerabilities#cue
One-click install
npx skills add https://github.com/open-platform-model/cli --skill security-audit-open-platform-model
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/open-platform-model/cli/tree/main/.claude/skills/security-audit
Command: npx skills add https://github.com/open-platform-model/cli --skill security-audit-open-platform-model

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security audit of the OPM CLI codebase, identifying vulnerabilities in config parsing, credential handling, Kubernetes client usage, OCI registry interaction, CUE evaluation, path traversal, terminal output injection, and supply chain risks, and producing a severity-ranked report without modifying code.

Core Features & Use Cases

  • Multi-dimension checks spanning input validation, secret handling, Kubernetes API usage, registry interactions, file-system safety, and terminal output hygiene.
  • Targeted audits by path, feature, or full project scope, enabling remediation planning, risk assessment, and compliance reporting.
  • Typical use cases include pre-release security reviews, CI/CD gate checks, and architectural risk assessments for Go CLI projects.

Quick Start

Audit the OPM CLI codebase for security vulnerabilities and generate a severity-ranked report without modifying the source.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my Go CLI project for security vulnerabilities?▼

Run a security audit on your Go CLI project to scan for vulnerabilities across config parsing, credential handling, and Kubernetes client usage, generating a severity-ranked report with exact file and line references without modifying code.

What security checks are needed for Kubernetes client and OCI registry interactions in Golang?▼

Security audits for Kubernetes and OCI registry interactions validate API usage and registry communication safety, identifying potential vulnerabilities in your Go codebase and reporting them as CRITICAL or WARNING findings.

Can I scan a specific directory path for path traversal and CUE evaluation risks?▼

Yes, you can perform targeted security audits on specific paths or features within your project to assess CUE evaluation and path traversal risks, enabling focused remediation planning without scanning the entire codebase.

How do I generate a severity-ranked vulnerability report for CI/CD gate checks?▼

Execute a full project security audit to produce a structured vulnerability report categorizing findings into CRITICAL, WARNING, and SUGGESTION severity levels, suitable for use as a CI/CD gate check or pre-release review.

Does the security audit modify my source code when detecting supply chain risks?▼

No, the security audit explicitly does not modify your source code; it performs read-only analysis of supply chain risks and terminal output injection vulnerabilities, outputting a structured report with explicit file and line references.

Related Skills

Explore More Software Engineering Skills→
salmanabdurrahmansalmanabdurrahman

container-kubernetes

Audit Kubernetes clusters for API-server exposure, RBAC, and workload security.

Community
Advanced
Rune-kitRune-kit
82

sentinel

Scan code commits for secrets, OWASP top 10 patterns, and dependency vulnerabilities.

Official
Advanced
utsavthakurutsavthakur

code-security-auditor

Audit codebases with static analysis and generate structured risk reports.

Community
Advanced
az9713az9713

dependency-audit

Audit project dependencies for vulnerabilities, license issues, and bloat.

Community
Intermediate