security-auditor

Scanning a codebase for security vulnerabilities involves checking source and configuration files for risky patterns like command injection, XSS, and auth bypass. This skill generates a categorized PASS/WARN/FAIL report with remediation guidance to fix issues before release.

Auditing dependencies for supply chain risk involves reviewing newly added packages for unsafe execution or vulnerable patterns. This skill evaluates repositories after dependency changes to detect supply-chain concerns and outputs a categorized PASS/WARN/FAIL report with actionable findings.

Detecting command injection and XSS vulnerabilities in source files requires pattern matching against risky code execution and cross-site scripting behaviors. This skill scans target codebases to flag these security flaws and generates a verdict report with remediation-oriented guidance.

Security audit tools that check for auth bypass patterns scan both source and configuration files for risky authentication logic. This skill flags auth bypass vulnerabilities during pre-deployment audits and post-incident re-audits, producing a clear PASS/WARN/FAIL report.

A post-incident security re-audit should be run after a compromise or exposure event to ensure common high-impact issues are addressed. This skill re-scans source and configuration files for command execution, secret exposure, and injection patterns to verify remediation.

A PASS/WARN/FAIL security report includes categorized verdicts and remediation-oriented guidance so teams know what to fix first. This skill generates this report format after scanning for vulnerabilities, secret leakage, and supply-chain concerns across the target codebase.