security-audit

Name: security-audit
Availability: InStock
Author: redwoodog

Scan codebases for secrets, vulnerable dependencies, and misconfigurations.

174|23|Updated Apr 3, 2026

Search Tags:#security #codebase #dependencies #audit #secrets #vulnerabilities

Ready to run

npx skills add https://github.com/RedWoodOG/Hermes-Desktop --skill security-audit-redwoodog

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/RedWoodOG/Hermes-Desktop/tree/main/skills/claude-code/security-audit
Command: npx skills add https://github.com/RedWoodOG/Hermes-Desktop --skill security-audit-redwoodog

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Enables security engineers to perform deep audits of a codebase, identifying vulnerabilities, hidden secrets, insecure dependencies, and misconfigurations.

Core Features & Use Cases

Secret and credential detection across source and config files.
Dependency vulnerability checks and insecure transitive dependencies.
Authentication and authorization assessment, including token handling and access controls.
Injection risk checks (SQL/command injection, XSS) and general secure coding guidance.
Configuration and deployment security review for best practices and hardening.

Quick Start

Run the audit workflow at the project root to start scanning for secrets, dependencies, and misconfigurations.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan my codebase for hidden secrets and vulnerable dependencies?▼

To scan a codebase for secrets and vulnerable dependencies, run an audit workflow at the project root. It automatically detects exposed credentials in source and config files while checking dependencies for known security vulnerabilities.

What does a codebase security audit check for besides dependency vulnerabilities?▼

A codebase security audit checks for hidden secrets, authentication flaws, injection risks like SQL or XSS, and deployment misconfigurations. It assesses token handling, access controls, and secure coding practices to ensure comprehensive application hardening.

Can I use this security audit workflow across different programming languages?▼

Yes, the security audit workflow applies across common programming languages and environments. It enforces structured checks for authentication flaws, injection risks, and configuration issues regardless of your specific tech stack.

How do I identify and fix SQL injection and XSS vulnerabilities in my source code?▼

To identify and fix SQL injection and XSS vulnerabilities, run the audit workflow to perform injection risk checks. It outputs a report with prioritized risk levels and remediation guidance to help you resolve the detected secure coding flaws.

What is the best way to review deployment configurations for security hardening?▼

The best way to review configurations for security hardening is to run a configuration and deployment security review. This process evaluates your setup against best practices to detect misconfigurations and outputs a report with actionable remediation steps.