security-audit

Name: security-audit
Availability: InStock
Author: stella

Identify and report security vulnerabilities across the Stella codebase.

163|43|Updated May 3, 2026

Search Tags:#security #vulnerability #audit #compliance #risk-assessment #code-review

Ready to run

npx skills add https://github.com/stella/stella --skill security-audit-stella

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/stella/stella/tree/main/.agents/skills/security-audit
Command: npx skills add https://github.com/stella/stella --skill security-audit-stella

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Scan the Stella codebase for security issues to protect sensitive legal data and ensure robust defenses against common vulnerabilities.

Core Features & Use Cases

Hardcoded secrets detection across source files (excluding .env templates and test data)
Auth and access-control verification for API handlers and routes
Workspace isolation and data-access governance, including presigned URL checks
Audit logging validation and governance for deletions, data handling, and compliance

Quick Start

Run the security-audit workflow against the Stella repository to surface potential security issues and begin remediation.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan my codebase for hardcoded secrets and security vulnerabilities?▼

A security audit scans source files, API handlers, and routes to identify hardcoded secrets and access-control vulnerabilities. It excludes .env templates and test data, focusing on active source code to protect sensitive information.

How do I verify workspace isolation and access control validation in my API routes?▼

Verify workspace isolation and access control by running an audit that inspects API handlers and routes for proper auth validation and data-access governance. This ensures users cannot cross workspace boundaries improperly.

Does the security audit check presigned URL security and data handling compliance?▼

Yes, the security audit comprehensively checks presigned URL security and data handling compliance. It validates audit logging for deletions and ensures sensitive legal data protection meets governance and compliance requirements.

What is the best way to audit code for security compliance and risk assessment?▼

The best way to conduct a security compliance and risk assessment audit is applying a comprehensive checklist covering hardcoded secrets, auth validation, and audit logging. This systematically identifies vulnerabilities across the codebase.

Can I run a security audit on dependency inspection and access control checks across multiple packages?▼

Yes, the security audit applies to dependency inspection and access control checks across apps/api and related packages. It ensures comprehensive vulnerability coverage and governance throughout your workspace architecture.

Why do I need audit logging validation for deletions and data handling in my application?▼

Audit logging validation for deletions and data handling is required to maintain compliance and protect sensitive legal data. It ensures destructive actions are tracked, providing robust defenses against unauthorized modifications.