skills.rest
ntuan2502
ntuan2502COMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-auditor

Audit code and infrastructure for OWASP Top 10 and compliance vulnerabilities.

Updated Feb 6, 2026
Search Tags:#security#vulnerability#penetration testing#sast#devsecops#auditor#dast
One-click install
npx skills add https://github.com/ntuan2502/piggy --skill security-auditor-ntuan2502
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-auditor
Source: https://github.com/ntuan2502/piggy/tree/main/.agent/skills/security-auditor
Command: npx skills add https://github.com/ntuan2502/piggy --skill security-auditor-ntuan2502

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and resources (resource) components.

What problem does it solve?

This Skill addresses the critical need to identify, exploit (safely), and remediate security vulnerabilities in software and infrastructure before they can be exploited by malicious actors.

Core Features & Use Cases

  • Vulnerability Scanning: Performs Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) to detect common security flaws.
  • Secure Coding Guidance: Provides recommendations based on secure coding patterns and best practices.
  • Compliance & Privacy: Assists with adherence to regulations like GDPR and standards like SOC2.
  • Infrastructure Security: Evaluates the security posture of underlying infrastructure.
  • Threat Modeling: Helps in identifying potential threats and assessing risks.
  • Use Case: Before deploying a new web application, run the security-auditor skill to perform a comprehensive scan, identify potential OWASP Top 10 vulnerabilities, and receive actionable remediation steps.

Quick Start

Run the security scan script for the current directory.

Frequently Asked Questions about security-auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my Node.js or Python code for OWASP Top 10 vulnerabilities?▼

SAST analyzes source code statically to find flaws, while DAST evaluates running applications dynamically from the outside. Both techniques detect common security vulnerabilities and provide actionable remediation steps to fix identified risks.

How do I perform threat modeling and infrastructure security checks before deployment?▼

You perform threat modeling and infrastructure security checks by running an audit script that evaluates your underlying infrastructure's posture, identifies potential threats, and assesses risks. This provides remediation guidance to secure your deployment.

Does this security auditing approach support compliance checks for GDPR and SOC2?▼

Yes, security auditing supports compliance checks for regulations like GDPR and standards like SOC2. It assesses your code and infrastructure against these requirements to assist with adherence and privacy protection.

What's the best way to integrate penetration testing and secure coding guidance into a DevSecOps workflow?▼

The best way to integrate penetration testing and DevSecOps is by running automated security scans that provide secure coding recommendations based on best practices. This identifies vulnerabilities early and guides safe remediation.

Can I use security auditing to evaluate both application code and underlying infrastructure?▼

Yes, you can use security auditing to evaluate both application code and infrastructure. It performs vulnerability scanning on Node.js and Python environments while simultaneously assessing the security posture of the underlying infrastructure.

Related Skills

Explore More Software Engineering Skills→
SnailSploitSnailSploit
2.9k

fast-checking

Provide a speed-optimized offensive security checklist for rapid assessments.

Community
Advanced
shalevaminshalevamin

security-reviewer

Identify security vulnerabilities in code and infrastructure with structured audit reports.

Community
Advanced
cosmixcosmix
53

ci-cd

Design and automate CI/CD pipelines for GitHub Actions, GitLab CI, and Jenkins.

Community
Advanced
borgheiborghei
467

senior-security

Identify and mitigate security risks in software systems using expert security engineering practices.

Community
Advanced