security-audit

To audit your codebase for security vulnerabilities, this skill detects your project's tech stack, loads stack-specific reference checklists, and scans for common vulnerability patterns to produce a structured remediation report. It systematically searches web, mobile, and backend code for risks.

You can use this security audit for web, mobile, and backend codebases. It identifies your specific tech stack during the scan and loads relevant security references and checklists to ensure the vulnerability detection applies to your project's architecture.

The best way to generate remediation guidance for OWASP risks is to run a systematic scan that checks your code against known vulnerability patterns. This skill outputs a structured report with prioritized remediation steps based on the specific security gaps found.

You do not need to configure checklists manually. The scan automatically detects your codebase's tech stack and loads the appropriate security references and vulnerability checklists, streamlining the audit process for pre-release reviews and compliance assessments.

An automated vulnerability pattern search excels at identifying common coding risks but may miss complex business logic flaws. It provides prioritized remediation guidance for detected patterns, serving as a foundational step rather than a complete replacement for manual penetration testing.