security-audit

To perform a security audit, the skill reviews application code, dependencies, and configurations to identify vulnerabilities and misconfigurations. It categorizes findings and guides remediation using structured references and industry best practices.

Yes, the security audit is applicable to infrastructure configuration checks within CI/CD or manual workflows. It enforces audit scope and provides prioritized remediation guidance tailored for operations and developers.

You can use OWASP best practices to guide code security reviews and dependency audits. The skill identifies policy gaps and tracks risks while enforcing scope to ensure structured, comprehensive reporting.

The best way to remediate vulnerabilities is by following the skill's structured references and best-practice patterns. It guides remediation by categorizing findings and tracking risks across code and dependencies.

You can initiate a repository-wide vulnerability management scan by invoking the audit with your target scope. It systematically identifies security vulnerabilities, misconfigurations, and policy gaps across the defined boundaries.

You should reconsider a systematic security review if your target scope is undefined, as the skill enforces strict scope boundaries. Without a clear scope, the audit cannot effectively categorize findings or guide remediation.