security-audit

Identify and remediate security vulnerabilities across multi-language codebases and CI/CD pipelines.

Updated Sep 16, 2025
One-click install
npx skills add https://github.com/singh-gur/opencode --skill security-audit-singh-gur
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/singh-gur/opencode/tree/main/skills/security-audit
Command: npx skills add https://github.com/singh-gur/opencode --skill security-audit-singh-gur

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill provides structured vulnerability scanning and secure coding guidance to help organizations identify, prioritize, and remediate security weaknesses across applications and services.

Core Features & Use Cases

  • Comprehensive vulnerability taxonomy spanning Injection, XSS (OWASP Top 10 components), Authentication & Session Management, Insecure Data Handling, Misconfiguration, and Dependency risks.
  • Remediation guidance & risk scoring aligned with CWE references and OWASP best practices to accelerate fixes.
  • Security reviews across lifecycles supporting multi-language codebases, CI/CD pipelines, and post-release hardening.

Quick Start

Initiate a security review on the latest build to generate vulnerability findings and remediation recommendations.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for OWASP Top 10 vulnerabilities?

You can scan multi-language codebases for OWASP Top 10 vulnerabilities by initiating a security review on your latest build, which generates vulnerability findings and risk-based remediation recommendations.

What is risk-based remediation guidance in security auditing?

Risk-based remediation guidance in security auditing prioritizes software vulnerability fixes using CWE references and OWASP best practices, accelerating resolution across development, testing, and production environments.

Does vulnerability scanning work with CI/CD pipelines and multi-language codebases?

Yes, vulnerability scanning supports multi-language codebases and CI/CD pipelines, enabling security reviews and post-release hardening across the entire secure development lifecycle.

How do I remediate insecure data handling and dependency risks?

You remediate insecure data handling and dependency risks by generating vulnerability findings through a security review, then applying the provided risk-scored guidance aligned with CWE references and OWASP best practices.

What's the best way to review authentication and session management weaknesses?

The best way to review authentication and session management weaknesses is to run a comprehensive security audit covering the full vulnerability taxonomy to receive targeted, risk-based remediation guidance aligned with CWE references.