security-auditor

Name: security-auditor
Availability: InStock
Author: Goffity

Audit JavaScript, TypeScript, Python, and Go code for OWASP Top 10 risks and hardcoded secrets.

Updated Feb 24, 2026

Search Tags:#code review #security #vulnerability #owasp #audit #secrets

Ready to run

npx skills add https://github.com/goffity/dev-km --skill security-auditor-goffity

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-auditor
Source: https://github.com/goffity/dev-km/tree/main/skills/security-auditor
Command: npx skills add https://github.com/goffity/dev-km --skill security-auditor-goffity

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill proactively identifies and helps remediate security vulnerabilities within your codebase, ensuring compliance with industry best practices and protecting against common threats.

Core Features & Use Cases

OWASP Top 10 Auditing: Systematically checks for risks like Broken Access Control, Injection flaws, and Cryptographic Failures.
Secrets Detection: Scans for hardcoded credentials, API keys, and other sensitive information.
Use Case: Before deploying a new feature, run this auditor to catch potential security loopholes, preventing costly breaches and maintaining user trust.

Quick Start

Run a security audit on the current project's codebase.

Frequently Asked Questions about security-auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan my codebase for OWASP Top 10 vulnerabilities and hardcoded secrets?▼

To scan for OWASP Top 10 vulnerabilities and hardcoded secrets, run an automated security audit on your codebase. This process checks JavaScript, TypeScript, Python, and Go files for common security flaws and generates a structured report with remediation steps.

What is the best way to detect hardcoded API keys and credentials in my source code?▼

The best way to detect hardcoded API keys and credentials is to perform a dedicated secrets detection scan. This security audit identifies sensitive information hardcoded in your JavaScript, TypeScript, Python, and Go files to prevent potential breaches.

Can I run a security audit on both Python and Go files in the same project?▼

Yes, you can run a security audit on Python and Go files simultaneously. The auditor systematically scans JavaScript, TypeScript, Python, and Go files to identify authentication risks, injection flaws, and broken access control.

How do I check my code for broken access control and cryptographic failures before deployment?▼

To check for broken access control and cryptographic failures before deployment, execute an OWASP Top 10 security audit. This evaluates your source code for systemic risks and outputs a detailed report guiding your remediation efforts.

What kind of report is generated after a code security audit?▼

A code security audit generates a structured report detailing identified risks and their corresponding remediation steps. This report highlights detected vulnerabilities like injection flaws and hardcoded secrets to help secure your application.