skills.rest
ShubhamManachekar
ShubhamManachekarCOMMUNITY
Explore all skills by this author →
GitHub

security-auditor

Automate penetration testing and continuous auditing to detect security flaws in GeoSupply.

Updated Mar 5, 2026
Search Tags:#security#audit#pentest#schema-validation#eventbus#hmac#geosupply
One-click install
npx skills add https://github.com/ShubhamManachekar/GeoSupply --skill security-auditor-shubhammanachekar
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-auditor
Source: https://github.com/ShubhamManachekar/GeoSupply/tree/main/.agent/skills/security-auditor
Command: npx skills add https://github.com/ShubhamManachekar/GeoSupply --skill security-auditor-shubhammanachekar

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill enables GeoSupply security teams to detect and mitigate vulnerabilities through automated penetration testing and continuous auditing, reducing exposure from misconfigurations and sensitive data leakage.

Core Features & Use Cases

  • Automated security auditing and penetration testing across GeoSupply components (API exposure, event integrity, schema validation, budget enforcement, and override tamper detection).
  • Real-time findings publication to security supervision channels and structured remediation reports.
  • Supports HMAC-SHA256 signing, key rotation, and cross-component schema validation within ingestion pipelines.

Quick Start

Initiate a LoopholeHunter security audit against your GeoSupply deployment to detect the eight pen-test vectors and publish findings.

Frequently Asked Questions about security-auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect API key exposure and unsigned event injection in my GeoSupply deployment?▼

Automated security auditing detects API key exposure and unsigned event injection by running penetration tests across GeoSupply components. It enforces HMAC-SHA256 signing checks to identify vulnerabilities and publish findings to security supervision channels.

What is schema bypass and budget evasion in GeoSupply event pipelines?▼

Schema bypass and budget evasion are security flaws where ingestion pipelines skip schema_version validation or exceed allocated limits. Continuous auditing detects these vulnerabilities by enforcing schema validation and budget controls across GeoSupply deployments.

How do I set up continuous security auditing for GeoSupply CI/CD pipelines?▼

Initiate a security audit against your GeoSupply deployment to detect pen-test vectors within CI/CD pipelines. The audit enforces HMAC signing, schema validation, and tamper detection, generating structured remediation reports with auditable traces.

Does GeoSupply security auditing support HMAC key rotation and cross-component schema validation?▼

GeoSupply security auditing supports HMAC-SHA256 signing, key rotation, and cross-component schema validation within ingestion pipelines. This ensures event integrity and prevents schema bypass vulnerabilities across components.

What are the limitations of automated penetration testing for GeoSupply override tamper detection?▼

Automated penetration testing focuses on eight specific vectors including override tampering and API exposure. It requires properly configured GeoSupply deployments and CI/CD pipelines to generate accurate auditable traces and structured remediation reports.

Related Skills

Explore More Software Engineering Skills→
ShubhamManachekarShubhamManachekar

cicd-checkers

Enforce CI/CD phase gate rules and pytest suites for Phase 12 deployments.

Community
Advanced
Endor-Solutions-ArchitectureEndor-Solutions-Architecture
2

endor-secrets

Scan codebases and identify exposed secrets, credentials, and API keys with remediation steps.

Official
Intermediate
zapabobzapabob
2

git4d-schema

Validate Git4D configurations, schema definitions, and DevOps pipeline integrity.

Community
Intermediate
AcczdyAcczdy
2

performing-web-application-penetration-test

Automate web application penetration testing following the OWASP WSTG with Burp Suite.

Community
Advanced