security-audit

Audit code for OWASP Top 10 vulnerabilities and generate a prioritized report.

Updated Dec 24, 2025

Search Tags:#code review #OWASP #security #vulnerability #audit #risk assessment

Ready to run

npx skills add https://github.com/yangqiong/claude-skills --skill security-audit-yangqiong

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/yangqiong/claude-skills/tree/main/development/security-audit
Command: npx skills add https://github.com/yangqiong/claude-skills --skill security-audit-yangqiong

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill addresses the critical need to identify and remediate security vulnerabilities within codebases, preventing potential breaches and protecting sensitive data.

Core Features & Use Cases

Comprehensive Vulnerability Scanning: Detects common security flaws based on OWASP Top 10 and other best practices.
Risk Assessment: Prioritizes identified issues based on severity and potential impact.
Remediation Guidance: Provides actionable steps to fix vulnerabilities.
Use Case: Before deploying a new feature, use this Skill to perform a thorough security audit, ensuring no critical vulnerabilities are present and that the code adheres to security best practices.

Quick Start

Use the security-audit skill to perform a security audit on the provided code.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I perform a security audit to identify vulnerabilities in my code?▼

To perform a security audit, provide your source code to this skill for analysis. It scans for OWASP Top 10 vulnerabilities, input validation issues, and cryptography flaws, generating a detailed report with prioritized remediation steps.

What does an OWASP Top 10 vulnerability scan check for?▼

An OWASP Top 10 vulnerability scan checks for critical security risks including broken authentication, cryptographic failures, and injection flaws. This skill analyzes code to detect these issues alongside API security, session management, and error handling vulnerabilities.

How do I assess security risks before deploying a new feature?▼

Assess security risks before deployment by running your code through a thorough audit. This skill evaluates input validation, authorization, and dependency security, outputting a detailed report categorizing identified issues into critical, high, medium, and low priority levels.

Can I review code for dependency security and file operation risks?▼

Yes, you can review code for dependency security and file operation risks. The audit evaluates dependencies for known vulnerabilities and inspects file operations, providing actionable recommendations to fortify your codebase against potential breaches.

What is the best way to generate remediation guidance for code vulnerabilities?▼

The best way to generate remediation guidance is executing a comprehensive security audit on your code. This skill identifies vulnerabilities and outputs a detailed report containing actionable steps to fix issues across critical, high, medium, and low priority levels.

Do I need any external tools to scan my codebase for security vulnerabilities?▼

No, you do not need external tools to scan your codebase for security vulnerabilities. This standalone skill analyzes authentication, authorization, and cryptography directly, delivering a comprehensive risk assessment report without requiring external dependencies.