skills.rest
winsorllc
winsorllcCOMMUNITY
Explore all skills by this author →
GitHub

security-audit

Scan code repositories for security vulnerabilities and exposed secrets using predefined patterns.

1|Updated Feb 25, 2026
Search Tags:#devops#security#vulnerability#audit#secrets#code scanning
One-click install
npx skills add https://github.com/winsorllc/upgraded-carnival --skill security-audit-winsorllc
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/winsorllc/upgraded-carnival/tree/main/.pi/skills/security-audit
Command: npx skills add https://github.com/winsorllc/upgraded-carnival --skill security-audit-winsorllc

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill helps identify and mitigate security risks in your codebase by detecting exposed secrets and common vulnerabilities.

Core Features & Use Cases

  • Secret Detection: Finds exposed API keys, passwords, tokens, and other sensitive credentials.
  • Vulnerability Scanning: Identifies insecure coding patterns like SQL injection, command injection, and weak cryptography.
  • Use Case: Integrate this into your CI/CD pipeline to automatically flag potential security issues before they reach production.

Quick Start

Run a full security audit on the current directory.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan code for exposed secrets and API keys?▼

To scan code for exposed secrets, run an audit script over your repository that uses regular expressions to detect API keys, tokens, and passwords. This identifies sensitive credentials before they reach production.

Can I detect SQL injection vulnerabilities in my codebase?▼

Yes, you can detect SQL injection vulnerabilities by scanning your codebase for insecure coding patterns. The audit identifies command injection, path traversal, and weak cryptography flaws.

How do I automate security vulnerability scanning in a CI/CD pipeline?▼

You can automate vulnerability scanning in a CI/CD pipeline by integrating the audit script to run against your code repositories. This automatically flags potential security issues during the build process.

Do I need Node.js to run a security audit on my code repository?▼

Yes, you need Node.js installed in your environment to execute the audit script. The script relies on the Node.js runtime to scan directories and evaluate predefined security patterns.

What types of security flaws can regular expression code scanning find?▼

Regular expression code scanning finds common security flaws like SQL injection, command injection, path traversal, and weak cryptography, alongside detecting exposed credentials like passwords and tokens.

Related Skills

Explore More Software Engineering Skills→
hckhanhhckhanh
3

ctx-upgrade

Fetch, build, install, and configure the Context Mode plugin automatically.

Community
Intermediate
HelloEverybobyHelloEveryboby
17

SDLCOrchestrator

Automate SAST, DAST, and SCA security scans in CI/CD pipelines.

Community
Intermediate
not-subhunot-subhu

security-scan

Orchestrate dependency audits, static application security testing, and privacy dataflow analysis.

Community
Advanced
Razmik-KutinavaRazmik-Kutinava

Secrets Detection Rules Expert

Generate and optimize secrets detection rules for credentials and API keys.

Community
Advanced