security-audit

Audit codebases for security vulnerabilities with OWASP Top 10 checks.

4|1|Updated May 31, 2015

Search Tags:#security #owasp #dependencies #audit #secrets #code-review #data-exposure

Ready to run

npx skills add https://github.com/samcdavid/dotfiles --skill security-audit-samcdavid

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/samcdavid/dotfiles/tree/main/claude/skills/security-audit
Command: npx skills add https://github.com/samcdavid/dotfiles --skill security-audit-samcdavid

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Deep security auditing of code changes and codebases to uncover vulnerabilities, misconfigurations, and data exposure risks beyond standard code reviews.

Core Features & Use Cases

Map the attack surface across codebases and changes
Perform OWASP Top 10 checks and data-flow analysis
Generate structured security risk reports and remediation guidance

Quick Start

Audit a target scope by specifying a PR number, file paths, or a feature/area to scan.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I perform a security audit on a specific pull request?▼

To perform a security audit on a pull request, provide the PR number as the target scope. The audit will map the attack surface, run OWASP Top 10 checks, and scan for secrets and data exposure in those specific changes.

What is the best way to scan my codebase for hidden secrets and data exposure?▼

Scanning for secrets and data exposure is handled by running a focused security audit on your specified files or feature areas. The audit identifies vulnerabilities and generates structured risk reports with remediation guidance.

Can I check my code changes against the OWASP Top 10 vulnerabilities?▼

Yes, you can check code changes against the OWASP Top 10 by specifying the target files or feature area. The audit performs dedicated OWASP checks and data-flow analysis to uncover misconfigurations and security risks.

How do I map the attack surface of a new feature in my codebase?▼

Map the attack surface of a new feature by specifying the feature area as the audit scope. The security audit will analyze the targeted code paths to identify potential vulnerabilities and data exposure risks.

Does this security audit work for specific files or does it scan the entire codebase?▼

The security audit works for specific files, feature areas, or PR changes based on the scope you select. If no scope is provided, it will prompt you to specify the target area before running the vulnerability and secrets checks.