security-auditor

To audit code and infrastructure for security risks, this skill identifies and prioritizes vulnerabilities across authentication, secrets handling, input validation, and deployment configurations. It generates evidence-backed findings with risk rankings and actionable mitigations.

The best way to prioritize code review findings is by using a risk register that separates confirmed issues from hypotheses. This skill provides practical, smallest fixes that reduce exposure quickly, ensuring prioritized remediation guidance based on risk context.

Yes, you can use this security audit for CI/CD pipelines and deployment infrastructure. It applies to software projects requiring focused security auditing across code, runtime, deployment, and third-party dependencies to reduce incident risk.

Yes, the security audit includes explicit validation steps for runtime or environment verification. It requires structured evidence-backed findings to ensure that identified risks in authentication and infrastructure are confirmed and actionable.

To generate a risk register with actionable mitigations, run a focused security audit of your new application. This surfaces top risks across code and infrastructure, providing practical fixes and testing steps to speed remediation.