skills.rest
supermalang
supermalangCOMMUNITY
Explore all skills by this author →
Website𝕏@supermalang_GitHub

security-audit

Audit modified files for OWASP Top 10 security vulnerabilities and policy violations.

Updated Mar 2, 2026
Search Tags:#code review#security#authentication#vulnerability#owasp#audit#compliance
One-click install
npx skills add https://github.com/supermalang/ai-augmented-coding --skill security-audit-supermalang
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/supermalang/ai-augmented-coding/tree/main/.claude/skills/security-audit
Command: npx skills add https://github.com/supermalang/ai-augmented-coding --skill security-audit-supermalang

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It reviews the active task's code changes for security flaws before review, helping teams catch access control, injection, misconfiguration, and policy violations before they ship.

Core Features & Use Cases

  • Focused diff-based audit of only the files changed by the current task.
  • Checks OWASP Top 10 risks plus project-specific absolute rules from the workspace context.
  • Guides triage by severity and supports immediate fixes for critical and high findings.
  • Best used after qa testing and before pr review on API routes, authentication logic, database queries, and other sensitive paths.

Quick Start

Ask the assistant to audit the active task's changed files for security issues, report findings by severity, and fix any critical or high problems before handing off to pr review.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit code changes for security vulnerabilities before PR review?▼

You can audit code changes for security vulnerabilities by analyzing the active task's modified files, focusing on API routes, authentication flows, and database queries to catch access control and injection flaws before review.

What is a diff-based security audit and when should I run it?▼

A diff-based security audit reviews only the files changed by the current task rather than the entire codebase. It is best run after QA testing and before PR review to identify policy violations early.

How do I check modified API routes for OWASP Top 10 risks?▼

To check modified API routes for OWASP Top 10 risks, the audit verifies your changed files against standard security controls and project-specific absolute rules sourced from the workspace context.

Can I automatically fix critical security findings in my code changes?▼

Yes, you can fix critical security findings by triaging the audit results by severity and applying immediate fixes to any critical or high-level vulnerabilities before handing off the code.

Does this security audit work on database queries and authentication logic?▼

Yes, the security audit works specifically on sensitive paths including database queries, authentication logic, and API routes, verifying them for misconfiguration and policy violations before shipping.

Related Skills

Explore More Software Engineering Skills→
hidemaro-nsketchhidemaro-nsketch

context-loader

Load project context from the .claude directory for OpenCLI.

Community
Intermediate
D0NMEGAD0NMEGA
8

gsd-ship

Push a branch, create a PR with an auto-generated body, and track merge status.

Community
Advanced
jamesjlundinjamesjlundin
32

deploy-helper

Run pre-deploy checks and generate a deployment readiness report.

Community
Advanced
voidrotvoidrot

sast-configuration

Configure SAST tools like Semgrep, CodeQL, and SonarQube for CI/CD pipelines.

Community
Intermediate