skills.rest
goffity
goffityCOMMUNITY
Explore all skills by this author →
Website𝕏@goffityGitHub

security-auditor

Audit JavaScript, TypeScript, Python, and Go code for OWASP Top 10 risks and hardcoded secrets.

Updated Feb 24, 2026
Search Tags:#code review#security#vulnerability#owasp#audit#secrets
One-click install
npx skills add https://github.com/goffity/dev-km --skill security-auditor-goffity
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-auditor
Source: https://github.com/goffity/dev-km/tree/main/skills/security-auditor
Command: npx skills add https://github.com/goffity/dev-km --skill security-auditor-goffity

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill proactively identifies and helps remediate security vulnerabilities within your codebase, ensuring compliance with industry best practices and protecting against common threats.

Core Features & Use Cases

  • OWASP Top 10 Auditing: Systematically checks for risks like Broken Access Control, Injection flaws, and Cryptographic Failures.
  • Secrets Detection: Scans for hardcoded credentials, API keys, and other sensitive information.
  • Use Case: Before deploying a new feature, run this auditor to catch potential security loopholes, preventing costly breaches and maintaining user trust.

Quick Start

Run a security audit on the current project's codebase.

Frequently Asked Questions about security-auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for OWASP Top 10 vulnerabilities and hardcoded secrets?▼

To scan for OWASP Top 10 vulnerabilities and hardcoded secrets, run an automated security audit on your codebase. This process checks JavaScript, TypeScript, Python, and Go files for common security flaws and generates a structured report with remediation steps.

What is the best way to detect hardcoded API keys and credentials in my source code?▼

The best way to detect hardcoded API keys and credentials is to perform a dedicated secrets detection scan. This security audit identifies sensitive information hardcoded in your JavaScript, TypeScript, Python, and Go files to prevent potential breaches.

Can I run a security audit on both Python and Go files in the same project?▼

Yes, you can run a security audit on Python and Go files simultaneously. The auditor systematically scans JavaScript, TypeScript, Python, and Go files to identify authentication risks, injection flaws, and broken access control.

How do I check my code for broken access control and cryptographic failures before deployment?▼

To check for broken access control and cryptographic failures before deployment, execute an OWASP Top 10 security audit. This evaluates your source code for systemic risks and outputs a detailed report guiding your remediation efforts.

What kind of report is generated after a code security audit?▼

A code security audit generates a structured report detailing identified risks and their corresponding remediation steps. This report highlights detected vulnerabilities like injection flaws and hardcoded secrets to help secure your application.

Related Skills

Explore More Software Engineering Skills→
mgd34msumgd34msu
4

dependency-management

Analyze, optimize, and audit project dependencies for security and conflicts.

Community
Advanced
sugarforeversugarforever
131

Next.js Security Scan

Scan Next.js and TypeScript/JavaScript projects for security vulnerabilities.

Community
Advanced
ayiaayia

security-auditor

Audits NutriProfile code for security vulnerabilities and GDPR compliance across layers.

Community
Advanced
indoor47indoor47
9

security-audit

Audit codebases for OWASP Top 10 vulnerabilities, misconfigurations, and exposed secrets.

Community
Advanced