skills.rest
erichowens
erichowensCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-auditor

Identifies security vulnerabilities in codebases and dependencies across multiple languages.

181|30|Updated Nov 16, 2025
Search Tags:#OWASP#security#vulnerabilities#secret detection#SAST
One-click install
npx skills add https://github.com/erichowens/some_claude_skills --skill security-auditor-erichowens
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-auditor
Source: https://github.com/erichowens/some_claude_skills/tree/main/.claude/skills/devops-automator
Command: npx skills add https://github.com/erichowens/some_claude_skills --skill security-auditor-erichowens

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires jq, and includes scripts (resource) and references (resource) components.

What problem does it solve?

Provides security auditing capabilities for codebases, including dependency checks, secret detection, and OWASP-focused static analysis.

Core Features & Use Cases

  • Dependency Scanning: npm/yarn/pip vulnerabilities awareness.
  • Secret Detection: High-entropy patterns and credential leaks.
  • OWASP Top 10 Static Analysis: Detection patterns and remediation guidance.

Quick Start

Run a full security audit on a project to generate a unified report.

Frequently Asked Questions about security-auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for security vulnerabilities before deployment?▼

Security scanning identifies vulnerabilities in your code and dependencies through automated checks. This Skill runs npm audit, pip-audit, secret detection, and OWASP Top 10 static analysis to generate a unified security report before you deploy.

Can I detect secrets and credential leaks in my repository?▼

Yes. The Skill detects high-entropy patterns and credential leaks across your codebase, flagging exposed API keys, passwords, and tokens that pose security risks.

Does this work with both Node.js and Python projects?▼

Yes. The Skill integrates npm audit for Node.js and pip-audit for Python dependencies, plus language-agnostic SAST for injection and XSS vulnerabilities and OWASP compliance checks.

What security checks does this perform for OWASP compliance?▼

The Skill applies static analysis patterns targeting OWASP Top 10 vulnerabilities, including injection attacks and cross-site scripting (XSS), with remediation guidance for each finding.

How do I generate a unified security posture report for my project?▼

Run a full audit to consolidate dependency scan results, detected secrets, SAST findings, and OWASP checks into one actionable report showing your security posture.

What happens if the Skill finds vulnerabilities in my dependencies?▼

The Skill flags vulnerable packages from npm and pip audits with severity levels and remediation steps, helping you prioritize patches before deployment.

Related Skills

Explore More Software Engineering Skills→
harperaaharperaa
15

supply-chain-dependency-risks-ai-code

Analyze dependency manifests for CVEs, typosquatting, and dependency-confusion risks.

Community
Intermediate
petrSimonidesXartpetrSimonidesXart

security-audit

Scan code, configurations, and deployments to generate vulnerability reports with remediation steps.

Community
Advanced
statick88statick88
1

security-auditor

Scan codebases for security vulnerabilities, dependency issues, and secret exposure.

Community
Advanced
kivo360kivo360
1

moai-domain-security

Mitigate security vulnerabilities in CI/CD pipelines using OWASP Top 10 and SAST/DAST workflows.

Community
Advanced