security-audit

Audit project codebases for security vulnerabilities in read-only mode.

Updated Jun 17, 2026
One-click install
npx skills add https://github.com/postpo-cmyk/team-plugins --skill security-audit-postpo-cmyk
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/postpo-cmyk/team-plugins/tree/main/plugins/security-audit-plugin/skills/security-audit
Command: npx skills add https://github.com/postpo-cmyk/team-plugins --skill security-audit-postpo-cmyk

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill provides a complete security audit of an entire project or codebase, focusing on identifying security vulnerabilities such as exposed secrets, open database rules, lack of authentication or access control, injection flaws, XSS, insecure file uploads, vulnerable dependencies, and insecure configurations. It is designed for projects developed without security knowledge or programming skills.

Core Features & Use Cases

  • Complete Security Audit: Analyzes the entire project for security vulnerabilities.
  • Read-Only Mode: Performs analysis without modifying code or executing destructive commands.
  • Spanish Language Report: Provides a clear and detailed report in Spanish, prioritizing high-severity issues.
  • Advisory and Correction: Offers to correct identified issues with user approval.

Quick Start

Run the security-audit skill on your project to perform a comprehensive security audit.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security audit on my codebase without modifying any code?

A read-only security audit identifies vulnerabilities in your codebase using static analysis and manual inspection without executing destructive commands or modifying code. It analyzes project files and configurations to detect exposed secrets, injection flaws, and insecure settings.

What types of security vulnerabilities can a complete project security audit identify?

A complete project security audit identifies exposed secrets, open database rules, lack of authentication, injection flaws, XSS, insecure file uploads, vulnerable dependencies, and insecure configurations. It analyzes the entire codebase to pinpoint these security vulnerabilities.

Does a vulnerability assessment require access to my project's configuration files?

Yes, a vulnerability assessment requires access to your project's code and configuration files to accurately identify security vulnerabilities. Analyzing these files allows the audit to detect insecure configurations, open database rules, and exposed secrets.

Can I get a security audit report in Spanish for my project?

Yes, this security audit provides a clear and detailed report in Spanish, prioritizing high-severity security vulnerabilities. The report outlines identified issues and offers advisory and correction steps with user approval.

What's the best way to audit project security for web applications lacking access control?

Auditing project security for web applications lacking access control involves analyzing the entire codebase for authentication flaws and insecure configurations. A comprehensive read-only security audit pinpoints these vulnerabilities and provides prioritized remediation advisory.

When do I need a comprehensive security audit for my codebase?

You need a comprehensive security audit when your project is developed without dedicated security knowledge, aiming to detect security vulnerabilities like XSS, injection flaws, and vulnerable dependencies before deployment. It ensures your project security by identifying and correcting exposed issues.