skills.rest
Kaikei-e
Kaikei-eCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-auditor

Audit codebases for security vulnerabilities and produce structured OWASP-aligned findings reports.

9|4|Updated May 30, 2025
Search Tags:#owasp#sast#code-review#security-audit#asvs#agentic-security#vulnerability-reporting
One-click install
npx skills add https://github.com/Kaikei-e/Alt --skill security-auditor-kaikei-e
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-auditor
Source: https://github.com/Kaikei-e/Alt/tree/main/.claude/skills/security-auditor
Command: npx skills add https://github.com/Kaikei-e/Alt --skill security-auditor-kaikei-e

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill performs thorough, standards-aligned security reviews of code and pull requests, identifying vulnerabilities, mapping them to OWASP categories and CWE/ASVS requirements, and producing evidence-backed remediation guidance so teams can confidently reduce risk.

Core Features & Use Cases

  • Baseline and Diff Audits: Full-service baseline reviews for modules or shallow, focused diffs for PRs and change hunks.
  • Standards Mapping: Maps findings to OWASP Top 10:2025, ASVS 5.0, Secure Code Review guidance, and Agentic Top 10:2026 for LLM/agent paths.
  • Practical Remediation: Provides severity, attack scenario, concrete code-level fixes, and references for each finding.
  • Supply Chain & Language Checks: Integrates dependency auditing guidance and language-specific grep patterns for Go, Rust, Python, and TypeScript.
  • Use Case: Review a pull request that modifies authentication and a RAG pipeline to surface injection, auth bypass, or agentic memory poisoning risks.

Quick Start

Run a diff-mode audit on the target PR or path to generate a structured OWASP-aligned findings report with remediation priorities.

Frequently Asked Questions about security-auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit code for OWASP vulnerabilities in a pull request?▼

Audit OWASP vulnerabilities in a pull request by running a diff-mode security audit on the target path, which generates a structured findings report mapping issues to CWE, severity, and concrete remediation steps.

What is an OWASP ASVS security audit?▼

An OWASP ASVS security audit is a code review process that maps identified vulnerabilities to ASVS 5.0 requirements and OWASP Top 10:2025 categories, providing evidence-backed remediation guidance to reduce application risk.

Can I review LLM and RAG pipelines for agentic security risks?▼

Yes, you can review LLM and RAG pipelines for agentic security risks by mapping code paths to the OWASP Agentic Top 10 2026, identifying vulnerabilities like injection or memory poisoning in agent workflows.

Does the security audit support dependency and supply chain checks?▼

Yes, the security audit supports dependency and supply chain checks by integrating dependency auditing guidance with language-specific grep patterns for Go, Rust, Python, and TypeScript codebases.

How do I perform a baseline security review of a codebase?▼

Perform a baseline security review of a codebase by executing a full-service audit on the target module, which surfaces vulnerabilities in authentication, cryptography, and deserialization paths with actionable code-level fixes.

What is the difference between baseline and diff security audits?▼

Baseline security audits perform thorough full-service reviews of entire modules, while diff audits execute shallow, focused reviews on pull request change hunks to surface vulnerabilities in modified code paths.

Related Skills

Explore More Software Engineering Skills→
ImaginerLabsImaginerLabs

security-review

Scan codebases for security vulnerabilities and generate severity-grouped findings with patch proposals.

Official
Advanced
LerianStudioLerianStudio
205

ops-security-audit

Automate infrastructure security audits with phased scanning and compliance mapping.

Official
Advanced
BautistaPessagnoBautistaPessagno

owasp-security

Review codebases against OWASP Top 10:2025 and ASVS 5.0 security controls.

Community
Advanced
89jobrien89jobrien
4

security-audit

Identify software codebase vulnerabilities and map findings to OWASP Top 10.

Community
Advanced