skills.rest
ihmorol
ihmorolCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-auditor

Scan code for OWASP Top 10 vulnerabilities and insecure patterns.

1|2|Updated Jan 15, 2026
Search Tags:#code review#security#vulnerability#owasp#secrets#scanning
One-click install
npx skills add https://github.com/ihmorol/unsw-nb15-handling-binary-multiclass-ids --skill security-auditor-ihmorol
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-auditor
Source: https://github.com/ihmorol/unsw-nb15-handling-binary-multiclass-ids/tree/main/.opencode/skills/security-auditor
Command: npx skills add https://github.com/ihmorol/unsw-nb15-handling-binary-multiclass-ids --skill security-auditor-ihmorol

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill automatically detects common security vulnerabilities and insecure coding patterns in your codebase, helping to prevent breaches and protect sensitive data.

Core Features & Use Cases

  • Vulnerability Detection: Identifies OWASP Top 10 risks like SQL injection, XSS, and exposed secrets.
  • Severity Assessment: Assigns severity levels (Critical, High, Medium, Low) to identified issues.
  • Remediation Guidance: Provides specific suggestions and code examples for fixing vulnerabilities.
  • Use Case: Before deploying a new API endpoint, run this Skill to ensure it doesn't contain critical vulnerabilities like SQL injection or improper authentication.

Quick Start

Use the security-auditor skill to scan the current directory for any security vulnerabilities.

Frequently Asked Questions about security-auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan code for security vulnerabilities before deployment?▼

To scan code for security vulnerabilities before deployment, run this Skill against your directory to identify OWASP Top 10 risks like SQL injection, XSS, and exposed secrets. It evaluates the codebase and assigns severity levels to guide your fixes.

What types of security flaws can be detected during a code review?▼

During a code review, security flaws like SQL injection, cross-site scripting (XSS), exposed secrets, and improper authentication can be detected. The scanner identifies insecure patterns and common exploits matching the OWASP Top 10.

Can I check my code for exposed secrets and authentication issues?▼

Yes, you can check your code for exposed secrets and authentication issues by running a vulnerability scan. The Skill detects insecure patterns and provides specific remediation guidance with code examples to fix the identified exposures.

Does vulnerability scanning provide guidance on how to fix SQL injection?▼

Vulnerability scanning provides specific remediation guidance on how to fix SQL injection by assessing the severity of the issue and suggesting code examples. It identifies insecure patterns in your codebase and targets them with corrective actions.

What's the best way to monitor file changes for insecure coding patterns?▼

The best way to monitor file changes for insecure coding patterns is to continuously scan the codebase for common exploits and OWASP Top 10 risks. This process detects vulnerabilities like XSS and exposed secrets, assigning severity levels to each issue.

Related Skills

Explore More Software Engineering Skills→
twlinestwlines

document

Generates structured Markdown documentation for Effect-TS code files and services.

Community
Intermediate
notquenotque
415

go-anti-patterns

Detect Go anti-patterns and produce remediation reports with before/after examples.

Community
Advanced
allanninalallanninal
1

semgrep

Scan codebases for security vulnerabilities and coding standards with Semgrep.

Community
Intermediate
nikhillinitnikhillinit

security-scanner

Detect security vulnerabilities, secrets, and misconfigurations in codebases.

Community
Advanced