security-auditor

To audit code for OWASP Top 10 vulnerabilities, provide your code snippet to the security-auditor. It conducts comprehensive vulnerability audits, identifying risks like SQL injection and XSS, and generates structured reports with actionable fixes.

Checking for secure authentication and input validation flaws is best handled by a dedicated security audit. This skill evaluates your code against secure coding practices, identifying weaknesses in authentication, authorization, and cryptographic implementations.

Yes, you can get actionable recommendations for remediating security risks before deployment. The security audit generates structured reports that identify vulnerabilities and provide specific guidance on fixes, including secure coding examples and security header templates.

Configuring security headers like CSP and HSTS involves applying specific HTTP response headers to restrict browser behaviors. This skill offers templates for essential security headers as part of its secure coding guidance to help prevent client-side attacks.

Yes, this security audit covers secrets management and cryptographic practices. It provides guidance on secure coding for authentication, authorization, input validation, and cryptographic implementations to ensure your architecture complies with best practices.

Automated secure code reviews excel at identifying common flaws like SQL injection and XSS based on the OWASP Top 10, but may miss complex architectural or business logic vulnerabilities. They provide actionable fixes for known patterns but require human oversight for complete coverage.