security-auditor

Detect OWASP Top 10 vulnerabilities and exposed secrets in codebases.

Updated Mar 29, 2026
One-click install
npx skills add https://github.com/Mateo1099/CampusFlow --skill security-auditor-mateo1099
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-auditor
Source: https://github.com/Mateo1099/CampusFlow/tree/main/.trae/skills/security-auditor
Command: npx skills add https://github.com/Mateo1099/CampusFlow --skill security-auditor-mateo1099

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Continuous security vulnerability scanning across codebases, enabling proactive defense before deployment.

Core Features & Use Cases

  • OWASP Top 10 pattern detection (SQLi, XSS, broken auth, misconfigurations, data exposure)
  • Integration with secret-scanner and /review workflows
  • Real-time alerts and actionable remediation guidance

Quick Start

Run a security audit on modified files to identify OWASP Top 10 issues and exposed secrets before deployment.

Frequently Asked Questions about security-auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for OWASP Top 10 vulnerabilities before deployment?

Automated vulnerability scanning detects OWASP Top 10 patterns like SQL injection, XSS, broken authentication, and data exposure by auditing file changes during code review or pre-deployment checks, providing actionable remediation guidance.

How do I detect exposed secrets in my code review workflow?

Detect exposed secrets during code review by integrating this security audit with secret-scanner workflows, scanning file changes to identify hardcoded credentials and generate real-time alerts with remediation steps.

Can I use automated vulnerability scanning for pre-deployment checks on modified files?

Yes, you can apply automated vulnerability scanning to modified files for pre-deployment checks, verifying the inclusion of automated checks for SQL injection, XSS, and authentication weaknesses before release.

Does automated security auditing work with standard code review workflows?

Automated security auditing integrates directly with code review workflows, applying continuous vulnerability scanning to file-change audits to catch OWASP Top 10 issues and secrets exposure early in development.

What is the best way to catch SQL injection and XSS issues during development?

The best way to catch SQL injection and XSS issues is continuous security vulnerability scanning that detects OWASP Top 10 patterns across codebases, enabling proactive defense with real-time alerts before deployment.