skills.rest
shakhovskiya-create
shakhovskiya-createCOMMUNITY
Explore all skills by this author →
GitHub

security-audit

Audit codebases for vulnerabilities, secrets, and misconfigurations across CI/CD workflows.

Updated May 5, 2026
Search Tags:#SAST#security-audit#multilanguage#secrets-detection#OWASP-top-10#code-security#dependency-cve
One-click install
npx skills add https://github.com/shakhovskiya-create/shakhoff-claude-marketplace --skill security-audit-shakhovskiya-create
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/shakhovskiya-create/shakhoff-claude-marketplace/tree/main/plugins/sdlc-audit/skills/security-audit
Command: npx skills add https://github.com/shakhovskiya-create/shakhoff-claude-marketplace --skill security-audit-shakhovskiya-create

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Secure software projects by systematically identifying vulnerabilities, insecure configurations, and dependency risks across languages and deployment pipelines.

Core Features & Use Cases

  • SAST scanning across Python, JavaScript, Go, and more to reveal code-level vulnerabilities.
  • Secrets detection to uncover leaked API keys and credentials in source history and current files.
  • OWASP Top 10 mapping to prioritize risk and guide remediation from injection to misconfigurations.
  • Dependency CVE review to surface known vulnerabilities and suggest fixes for third-party components.
  • Configuration and auth/review to detect insecure settings, TLS issues, and authorization gaps.
  • Deliverables stored under docs/audit/<TS>/ directories for traceability.

Quick Start

Run the security-audit skill on your project to perform SAST, secrets detection, OWASP mapping, CVE checks, and configuration reviews.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a multi-language SAST scan for my codebase?▼

Run the security-audit skill on your project to perform SAST scanning across Python, JavaScript, Go, and beyond, identifying code-level vulnerabilities and mapping them to the OWASP Top 10 for prioritized remediation.

What is the best way to detect leaked API keys and secrets in source files?▼

Run an automated security audit that includes secrets detection to scan current files and source history. This reveals exposed credentials and API keys, storing all findings under the docs/audit directory for traceability.

Can I check third-party dependencies for known CVEs in Python and JavaScript projects?▼

Yes, performing a dependency CVE review checks third-party components for known vulnerabilities in Python and JavaScript projects. The audit surfaces these dependency risks and suggests fixes to secure your software.

Does this security audit cover configuration and TLS issues in CI/CD pipelines?▼

Yes, the security audit includes configuration and auth reviews to detect insecure settings, TLS issues, and authorization gaps across deployment pipelines. It evaluates configurations within your CI/CD workflows to identify misconfigurations.

Related Skills

Explore More Software Engineering Skills→
gitgoodordietryinggitgoodordietrying
1

cicd-pipeline

Automate CI/CD pipelines with GitHub Actions across Node.js, Python, Go, and Rust.

Community
Advanced
jaem1n207jaem1n207
18

security-audit

Detects vulnerabilities and provides actionable security recommendations for your codebase.

Community
Advanced
sinhong2011sinhong2011
5

cicd-expert

Design, implement, and optimize CI/CD pipelines with security and performance best practices.

Community
Advanced
hoanghn61hoanghn61

source-code-scanning

Scan source code and dependencies for vulnerabilities, secrets, and malicious code.

Community
Advanced