security-audit

Audit Go, Python, TypeScript, and .NET codebases for security vulnerabilities.

Updated Aug 27, 2026
One-click install
npx skills add https://github.com/thisguymartin/ai-native-dev --skill security-audit-thisguymartin
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/thisguymartin/ai-native-dev/tree/main/.gemini/skills/security-audit
Command: npx skills add https://github.com/thisguymartin/ai-native-dev --skill security-audit-thisguymartin

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill identifies injection points, authentication and authorization flaws, hardcoded secrets, insecure dependencies, and other security weaknesses across an application's codebase to reduce the risk of compromise before deployment.

Core Features & Use Cases

  • Language-specific checks for Go, Python, TypeScript/JavaScript, and .NET with flagged patterns and severity guidance.
  • Universal audits including secrets detection, input validation, authentication/authorization reviews, dependency risk checks, and rate limiting/DoS analysis.
  • Use Case: Run a pre-release audit of a microservice repository to uncover SQL injection, insecure deserialization, exposed API keys, and missing auth middleware so the team can prioritize remediation.

Quick Start

Run a security audit on the backend/ directory focusing on authentication, injection, and secrets detection.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find hardcoded secrets and SQL injection vulnerabilities in my codebase?

A security audit scans your codebase to detect hardcoded secrets, SQL injection points, and exposed API keys. It produces a severity-classified markdown report saved to .security-audits, listing vulnerabilities from CRITICAL to LOW with specific remediation recommendations.

Can I run a security audit on Go, Python, and TypeScript projects?

Yes, security audits support Go, Python, TypeScript/JavaScript, and .NET projects. The audit applies language-specific checks to flag insecure patterns across single files, modules, or full repositories during pre-deployment checks and triage.

What is the best way to check for authentication and authorization flaws in a microservice?

Performing a targeted module-level security audit is the best way to check for authentication and authorization flaws in a microservice. This review identifies missing auth middleware and input validation issues, classifying them by severity in a markdown report.

Does the application security audit check for insecure dependencies and rate limiting issues?

Yes, the security audit includes universal checks for insecure dependencies and rate limiting or DoS analysis. These dependency risk checks identify security weaknesses before deployment and document them in the final audit report.

How do I generate a severity-classified vulnerability report before deployment?

Run a pre-deployment security audit on your repository to generate a severity-classified vulnerability report. The audit saves a markdown file to the .security-audits directory, detailing CRITICAL, HIGH, MEDIUM, and LOW findings alongside remediation recommendations.

What types of vulnerabilities are identified during a code repository security review?

A security review identifies injection points, authentication flaws, hardcoded secrets, and insecure dependencies. It also detects input validation issues and rate limiting weaknesses, reducing the risk of compromise before deployment.