skills.rest
Bambibanners
BambibannersCOMMUNITY
Explore all skills by this author →
GitHub

Security Audit (OWASP)

Identify OWASP Top 10 vulnerabilities in Python and JavaScript codebases.

1|1|Updated Jan 16, 2026
Search Tags:#security#vulnerability#owasp#secrets#static-analysis#code-audit#python-javascript
One-click install
npx skills add https://github.com/Bambibanners/master_of_puppets --skill security-audit-owasp
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Security Audit (OWASP)
Source: https://github.com/Bambibanners/master_of_puppets/tree/main/.agent/skills/review-security
Command: npx skills add https://github.com/Bambibanners/master_of_puppets --skill security-audit-owasp

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Security vulnerabilities in codebases often go undetected, exposing apps to OWASP Top 10 risks and data leaks; this skill helps security teams systematically detect and report them.

Core Features & Use Cases

  • Automated OWASP-aligned security reviews across Python/JS codebases.
  • Secrets detection with scan_secrets to reveal hardcoded credentials.
  • Structured output with findings, severity, and remediation guidance for audit reports.

Quick Start

Run the security audit on your repository to generate a comprehensive vulnerability report.

Frequently Asked Questions about Security Audit (OWASP)

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect OWASP Top 10 vulnerabilities in Python and JavaScript codebases?▼

Detect OWASP Top 10 vulnerabilities in Python and JavaScript codebases by running an automated security audit. The scan evaluates backend and frontend projects to identify risks like insecure deserialization and flawed input validation, outputting a structured vulnerability table with remediation guidance.

Can I scan for hardcoded secrets and credentials during a code audit?▼

Yes, you can scan for hardcoded secrets and credentials during a code audit. The security review leverages a dedicated scan_secrets feature to detect exposed credentials within your Python and JavaScript repositories and includes them in the report.

Does the security audit work within CI/CD workflows?▼

Yes, the security audit works within CI/CD workflows. It is specifically designed to identify and report OWASP risks across continuous integration pipelines for both backend and frontend projects.

What is included in the output when identifying security vulnerabilities in code?▼

When identifying security vulnerabilities in code, the output includes a structured vulnerability table and remediation guidance. This provides security teams with detailed findings and severity levels needed for comprehensive audit reports.

What specific OWASP risks does a static analysis code audit cover?▼

A static analysis code audit covers OWASP risks focusing on secrets handling, input validation, and secure deserialization. It systematically reviews Python and JavaScript codebases to expose data leak vulnerabilities.

Related Skills

Explore More Software Engineering Skills→
n-marusovn-marusov

aif-ci

Generate CI/CD pipeline configurations for GitHub Actions or GitLab CI.

Community
Advanced
sugarforeversugarforever
131

Python Security Scan

Scan Python projects for security vulnerabilities and dependency issues.

Community
Advanced
thisisqubikathisisqubika

security-review

Analyze code repositories for vulnerabilities using SAST and AI triage.

Official
Advanced
rnavarychrnavarych
14

security-testing

Automate security testing with Snyk, Semgrep, Gitleaks, and OWASP ZAP in CI/CD pipelines.

Community
Advanced