security-audit

Audit application code for OWASP Top 10 vulnerabilities and CVE impacts.

30|7|Updated Mar 1, 2026

Search Tags:#code review #security #vulnerability #owasp #penetration testing #cve

Ready to run

npx skills add https://github.com/rfdiosuao/openfang-cn --skill security-audit-rfdiosuao

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/rfdiosuao/openfang-cn/tree/main/crates/openfang-skills/bundled/security-audit
Command: npx skills add https://github.com/rfdiosuao/openfang-cn --skill security-audit-rfdiosuao

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps identify and mitigate security vulnerabilities in code and systems, protecting against common attack vectors and ensuring robust application security.

Core Features & Use Cases

Vulnerability Assessment: Analyzes code for common security flaws using OWASP guidelines.
CVE Analysis: Assesses the impact of known vulnerabilities (CVEs) on your systems.
Secure Code Review: Provides recommendations for secure coding practices and remediation.
Penetration Testing Methodology: Guides the application of attacker mindset to find weaknesses.
Use Case: A developer can use this Skill to scan a new feature's code for potential injection flaws or insecure handling of credentials before deployment.

Quick Start

Perform a security audit on the provided codebase, focusing on OWASP Top 10 vulnerabilities.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I perform a security audit on my codebase for OWASP Top 10 vulnerabilities?▼

To perform a security audit, analyze your codebase against OWASP Top 10 guidelines to identify common flaws like injection attacks. This process assesses code for vulnerabilities and provides secure coding recommendations to remediate them before deployment.

What is the best way to assess the impact of known CVEs on my application?▼

Assessing CVE impact involves analyzing known vulnerabilities within your system's context to determine their actual threat level. This analysis evaluates whether your specific configurations are affected and recommends necessary patches or secure coding adjustments.

How do I apply threat modeling using STRIDE for my application?▼

Applying STRIDE threat modeling involves systematically identifying threats across spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege categories. This methodology guides structured security analysis to find weaknesses in your system design.

Do I need SAST and DAST tool integration to conduct comprehensive penetration testing?▼

SAST and DAST tool integration is required for comprehensive analysis. Static and dynamic testing tools provide the automated scanning data needed to effectively guide penetration testing methodologies and validate vulnerabilities identified during manual code review.

Can I use this approach to find injection flaws and insecure credential handling in new features?▼

Yes, you can scan new feature code to identify potential injection flaws and insecure credential handling. The audit evaluates the implementation against secure coding practices, ensuring vulnerabilities are caught and remediated early in development.