security-audit

This Skill performs a security audit on your web application by scanning the codebase to detect common vulnerabilities like XSS and SQL injection, then provides actionable guidance on secure coding patterns and input validation to mitigate those risks.

Yes, you can integrate automated vulnerability scanning tools like npm audit and Snyk into your security audit. The Skill leverages these tools to perform continuous security checks and identify vulnerable dependencies within your project.

The best way to check for insecure secrets management and harden your application is to run a comprehensive security audit. This Skill identifies exposed secrets in your code and recommends best practices for CSP and application hardening before deployment.

Yes, this security audit provides guidance on authentication and input validation best practices. It evaluates your implementation and offers clear examples and recommendations to ensure your application adheres to secure coding standards.

You need to configure Content Security Policy (CSP) headers to prevent cross-site scripting (XSS) and data injection attacks. The security audit addresses CSP as a core best practice to harden applications and mitigate client-side vulnerabilities.