skills.rest
samcdavid
samcdavidCOMMUNITY
Explore all skills by this author →
𝕏@sammy_fix_itGitHub

security-audit

Audit codebases for security vulnerabilities with OWASP Top 10 checks.

4|1|Updated May 31, 2015
Search Tags:#security#owasp#dependencies#audit#secrets#code-review#data-exposure
One-click install
npx skills add https://github.com/samcdavid/dotfiles --skill security-audit-samcdavid
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/samcdavid/dotfiles/tree/main/claude/skills/security-audit
Command: npx skills add https://github.com/samcdavid/dotfiles --skill security-audit-samcdavid

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Deep security auditing of code changes and codebases to uncover vulnerabilities, misconfigurations, and data exposure risks beyond standard code reviews.

Core Features & Use Cases

  • Map the attack surface across codebases and changes
  • Perform OWASP Top 10 checks and data-flow analysis
  • Generate structured security risk reports and remediation guidance

Quick Start

Audit a target scope by specifying a PR number, file paths, or a feature/area to scan.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security audit on a specific pull request?▼

To perform a security audit on a pull request, provide the PR number as the target scope. The audit will map the attack surface, run OWASP Top 10 checks, and scan for secrets and data exposure in those specific changes.

What is the best way to scan my codebase for hidden secrets and data exposure?▼

Scanning for secrets and data exposure is handled by running a focused security audit on your specified files or feature areas. The audit identifies vulnerabilities and generates structured risk reports with remediation guidance.

Can I check my code changes against the OWASP Top 10 vulnerabilities?▼

Yes, you can check code changes against the OWASP Top 10 by specifying the target files or feature area. The audit performs dedicated OWASP checks and data-flow analysis to uncover misconfigurations and security risks.

How do I map the attack surface of a new feature in my codebase?▼

Map the attack surface of a new feature by specifying the feature area as the audit scope. The security audit will analyze the targeted code paths to identify potential vulnerabilities and data exposure risks.

Does this security audit work for specific files or does it scan the entire codebase?▼

The security audit works for specific files, feature areas, or PR changes based on the scope you select. If no scope is provided, it will prompt you to specify the target area before running the vulnerability and secrets checks.

Related Skills

Explore More Software Engineering Skills→
balic-AI-ML-R-D-Resourcesbalic-AI-ML-R-D-Resources

security-audit-context-building

Map architecture, trust boundaries, and data flows for security audit scoping.

Official
Advanced
imgompandaimgompanda
139

fireauto-secure-guide

Audit SaaS codebases for authentication, rate limiting, secrets, and dependency risks.

Community
Advanced
capaas2capaas2

vulnerability-scanner

Scan source repositories and configuration files for security vulnerabilities and exposed secrets.

Community
Advanced
alex-voloshin-devalex-voloshin-dev
2

security-scan

Automate dependency vulnerability checks, secret detection, and OWASP compliance reviews.

Community
Advanced