Verified:GitHub

security-auditor

Name: security-auditor
Availability: InStock
Author: kinnerkarmanish

Detect vulnerabilities and misconfigurations across codebases using static analysis, dependency checks, and secret detection.

Updated Apr 26, 2026

Search Tags:#security #vulnerability #owasp #auditing #secrets #sast #sca

Ready to run

npx skills add https://github.com/kinnerkarmanish/mak --skill security-auditor-kinnerkarmanish

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-auditor
Source: https://github.com/kinnerkarmanish/mak/tree/main/library/skills/security/auditor
Command: npx skills add https://github.com/kinnerkarmanish/mak --skill security-auditor-kinnerkarmanish

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Conduct comprehensive security analysis to detect vulnerabilities and misconfigurations.

Core Features & Use Cases

End-to-end security analysis across codebases using static analysis, dependency checks, and secret detection.
OWASP-aligned risk scoring with prioritized findings and remediation guidance.
CI/CD integration to automatically detect and report vulnerabilities during development.

Quick Start

Run a security audit on your project to detect secrets, misconfigurations, and vulnerable dependencies.

Frequently Asked Questions about security-auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I run a security audit to detect vulnerabilities in my codebase?▼

Run a security audit using static analysis, dependency checks, and secret detection to identify vulnerabilities and misconfigurations across your codebase. The audit provides prioritized findings with structured remediation guidance.

How does OWASP-aligned risk scoring work for vulnerability analysis?▼

OWASP-aligned risk scoring evaluates detected vulnerabilities and misconfigurations to assign priority levels. This structured reporting mechanism helps developers address the most critical security findings first during remediation.

Can I integrate SAST and SCA checks into my CI/CD pipeline?▼

Yes, you can integrate SAST and SCA security analysis directly into CI/CD pipelines. This automatically detects and reports vulnerable dependencies and code vulnerabilities during the development workflow.

What is the best way to detect hardcoded secrets in a repository audit?▼

The best way to detect hardcoded secrets is through automated secret detection workflows during a repository audit. This process scans codebases to identify exposed credentials and provides structured remediation guidance.

Does this security analysis support codebases across different programming languages?▼

Yes, comprehensive security analysis applies to codebases across multiple languages. It conducts static analysis and dependency checks to detect vulnerabilities regardless of the underlying programming environment.

When do I need a supply-chain security review for my dependencies?▼

You need a supply-chain security review when checking external dependencies for known vulnerabilities. SCA workflows analyze your dependency tree to detect misconfigurations and vulnerable packages during repository audits.