security-auditor

Analyze code against OWASP Top 10 standards for security vulnerabilities.

244|75|Updated Dec 22, 2025
One-click install
npx skills add https://github.com/pavel-molyanov/molyanov-ai-dev --skill security-auditor-pavel-molyanov
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-auditor
Source: https://github.com/pavel-molyanov/molyanov-ai-dev/tree/main/skills/security-auditor
Command: npx skills add https://github.com/pavel-molyanov/molyanov-ai-dev --skill security-auditor-pavel-molyanov

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill identifies and helps mitigate security vulnerabilities within your codebase, protecting your application from common and advanced threats.

Core Features & Use Cases

  • OWASP Top 10 Analysis: Detects vulnerabilities like SQL Injection, XSS, CSRF, and insecure authentication.
  • Dependency Scanning: Identifies known vulnerabilities in your project's dependencies.
  • Risk Assessment: Classifies vulnerabilities by severity (Critical, High, Medium, Low) to prioritize fixes.
  • Use Case: After a new feature is developed, run this auditor to ensure it doesn't introduce new security holes before deployment.

Quick Start

Run a comprehensive security audit on the provided codebase, focusing on OWASP Top 10 vulnerabilities.

Frequently Asked Questions about security-auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check my code for OWASP Top 10 vulnerabilities?

Security auditing against OWASP standards works by analyzing code handling authentication, user input, database queries, and external APIs. It identifies vulnerabilities like SQL Injection and XSS, classifies risks by severity, and provides actionable remediation steps to fix them.

Can I scan project dependencies for known security vulnerabilities?

Yes, you can scan project dependencies for known security vulnerabilities. The audit process includes dependency scanning to identify compromised packages, assesses their risk severity, and provides actionable remediation steps to secure your application.

When should I run a code security audit in my development workflow?

Run a code security audit after a new feature is developed to ensure it does not introduce new security holes before deployment. This validates that code handling authentication and database queries remains secure against common and advanced threats.

Does the vulnerability risk assessment classify issues by severity?

Yes, the vulnerability risk assessment classifies identified issues by severity, categorizing them as Critical, High, Medium, or Low. This allows you to prioritize fixes for critical risks like insecure authentication before addressing lower severity threats.

What is the best way to detect insecure authentication in my codebase?

The best way to detect insecure authentication is to perform a comprehensive security analysis against OWASP Top 10 standards. This audit specifically analyzes authentication code to identify vulnerabilities and provides actionable remediation steps to secure your application.