security-audit

Audit pull requests for vulnerabilities and compliance issues.

2|3|Updated Oct 20, 2025

Search Tags:#automation #compliance #data-integrity #code-review #pull-requests #security-audit #vulnerability-analysis

Ready to run

npx skills add https://github.com/psd401/psd-claude-coding-system --skill security-audit-psd401

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/psd401/psd-claude-coding-system/tree/main/plugins/psd-claude-coding-system/skills/security-audit
Command: npx skills add https://github.com/psd401/psd-claude-coding-system --skill security-audit-psd401

SYSTEM DOCUMENTATION & REQUIREMENTS

## What problem does it solve? Security reviews of pull requests are time-consuming and error-prone. This Skill automates the process by coordinating a security-analyst-specialist and data-integrity checks to surface vulnerabilities and compliance gaps.

## Core Features & Use Cases

Automated security audit: evaluate changed files for vulnerabilities such as injection, authentication weaknesses, and data exposure.
Architecture and best-practice validation: identify violations of proper layering, input validation, and test coverage gaps.
Data integrity and compliance checks: surface PII exposure and regulatory considerations during PR reviews.
Use case: When a PR changes multiple modules, run a security audit to produce a consolidated report for the reviewer.

### Quick Start To run a manual security audit, call the skill with a PR number, for example: /psd-claude-coding-system:security-audit 123

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate security audits for pull requests?▼

You can automate security audits for pull requests by invoking a security-analyst-specialist agent that analyzes changed files for vulnerabilities and formats findings directly into PR comments.

What does an automated PR vulnerability analysis check for?▼

An automated PR vulnerability analysis checks changed files for injection risks, authentication weaknesses, data exposure, architectural layering concerns, and adherence to security best practices.

How do I scan code for PII exposure and compliance issues during code review?▼

To scan code for PII exposure and compliance issues during code review, trigger a data-integrity scan that surfaces regulatory considerations and formats them into a structured PR report.

Do I need additional dependencies to run a data-integrity scan on a PR?▼

No additional dependencies are required to run a data-integrity scan, as the security audit tool coordinates the security-analyst-specialist and compliance checks internally without external components.

What is the best way to review architectural concerns across multiple changed modules?▼

The best way to review architectural concerns across multiple changed modules is running a security audit that validates proper layering, input validation, and test coverage gaps to return a structured report.

When should I avoid using automated security audits for PR reviews?▼

You should avoid using automated security audits when a pull request contains non-code changes, as the vulnerability analysis and data-integrity scans target code, tests, and deployment configurations specifically.