security-audit

Scans TypeScript projects for XSS vulnerabilities, insecure deserialization, and SQL injection risks, assigning severity levels and providing code suggestions for fixes.

Updated Jul 31, 2026
One-click install
npx skills add https://github.com/vikas-gits-good/Test-SAW-Repo --skill security-audit-vikas-gits-good
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/vikas-gits-good/Test-SAW-Repo/tree/main/.gemini/skills/security-audit
Command: npx skills add https://github.com/vikas-gits-good/Test-SAW-Repo --skill security-audit-vikas-gits-good

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill addresses the critical need for consistent security enforcement by automating RLS policy validation, vulnerability scanning, and OWASP compliance checks across your codebase.

Core Features & Use Cases

  • RLS Enforcement: Automatically detects direct database calls that bypass Row Level Security.
  • Vulnerability Scanning: Identifies hardcoded credentials and missing authentication checks in route handlers.
  • Use Case: Before deploying a new feature, use this skill to scan your API routes for missing auth checks and verify that all database queries are properly wrapped in security contexts.

Quick Start

Run the security audit skill to scan the current project for potential RLS bypasses and hardcoded secrets.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate Row Level Security validation in my web application?

Automate RLS validation by scanning your codebase to detect direct database calls that bypass Row Level Security policies. This security audit identifies unprotected queries in TypeScript applications to ensure all database access is wrapped in proper security contexts.

Can I scan my API routes for missing authentication checks before deployment?

Yes, you can scan API routes for missing authentication checks before deployment. The automated vulnerability scanning process analyzes route handlers to identify missing auth checks and hardcoded credentials, ensuring your application endpoints are secured.

What's the best way to check my TypeScript codebase for hardcoded credentials?

The best way to check for hardcoded credentials is using automated code analysis with standard utilities like grep. This security audit scans your TypeScript project to identify exposed secrets and verifies credential safety across the application.

Does this automated security audit verify OWASP compliance?

Yes, this security audit verifies OWASP compliance. It performs comprehensive security reviews on TypeScript-based web applications to ensure adherence to OWASP standards, combining vulnerability scanning with RLS enforcement checks.

What tools do I need to run automated vulnerability scanning on my project?

You need standard Unix utilities like grep and npm audit to run this vulnerability scanning. The security review operates on TypeScript-based web applications, using these dependencies to perform comprehensive pre-deployment checks.

When do I need to run a pre-deployment security audit on my database queries?

Run a pre-deployment security audit before deploying new features to verify that all database queries are properly wrapped in security contexts. This ensures RLS enforcement and prevents direct database calls from bypassing Row Level Security policies.