Audit codebases for OWASP Top 10, secrets, and supply chain vulnerabilities.
npx skills add https://github.com/rshade/agent-skills --skill security-audit-rshade
Please help me install this Agent Skill. Skill: security-audit Source: https://github.com/rshade/agent-skills/tree/main/skills/security-audit Command: npx skills add https://github.com/rshade/agent-skills --skill security-audit-rshade
Comprehensive security audit covering OWASP Top 10, secrets detection, supply chain security, threat modeling, and language-specific vulnerability patterns. Investigates actual code paths rather than grep-matching keywords. Generates a scored SECURITY_AUDIT.md with prioritized remediation. Use when assessing application security, preparing for a security review, or onboarding to a codebase with security concerns.
Run a full security audit on the repository to generate a prioritized remediation report.
High-intent search queries and answers about installing and using this skill.
A security audit evaluates your codebase against the OWASP Top 10 by investigating actual code paths rather than grep-matching keywords. It generates a scored SECURITY_AUDIT.md with prioritized remediation actions for identified risks.
Secrets and supply chain detection scans your repository to find exposed credentials and weak dependencies. The audit integrates with automated tools like gitleaks, semgrep, trivy, and npm audit to compile findings into a report.
Threat modeling during a security audit applies STRIDE and DREAD methodologies to produce prioritized remediation actions. This risk scoring helps identify and evaluate threats systematically across the analyzed codebase.
Security audit tools support language-specific vulnerability pattern detection across modern languages. The analysis integrates with tools like govulncheck and npm audit to identify supply chain and code-level risks.
Running a comprehensive security audit prepares your application for review by covering OWASP Top 10, secrets detection, supply chain security, and threat modeling. It produces an actionable report with mitigations for onboarding.
A thorough security audit investigates actual code paths rather than simply grep-matching keywords. This approach ensures accurate identification of vulnerabilities and generates a scored SECURITY_AUDIT.md with prioritized findings.
severeonManage NeuroScript package manifests, dependencies, and Ed25519-signed releases.
djwmobleyParse pipeline findings into uniform remediation records and tracked tickets.
statick88Automate security scanning for JavaScript and Python projects.
utsavthakurExtract keychain data and analyze iOS binary protections for authorized security assessments.
