security-auditor

Detect OWASP Top 10 vulnerabilities in code changes with structured alerts.

Updated Apr 18, 2026

Search Tags:#xss #secrets #sql-injection #code-review #vulnerability-detection #security-auditing #owasp-top-10

Ready to run

npx skills add https://github.com/Srujan0798/NRG --skill security-auditor-srujan0798

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-auditor
Source: https://github.com/Srujan0798/NRG/tree/main/.claude/skills/security-auditor
Command: npx skills add https://github.com/Srujan0798/NRG --skill security-auditor-srujan0798

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Codebases often accumulate security vulnerabilities during changes, and teams lack consistent, fast detection before deployment. This Skill provides automated scanning for common security issues and OWASP Top 10 patterns to catch issues early.

Core Features & Use Cases

Detects SQL Injection, XSS, secrets exposure, and authentication/authorization weaknesses.
Integrates with existing workflows (secret-scanner and /review) to deliver actionable alerts.
Suitable for code reviews, pre-deployment checks, and monitoring configuration changes.

Quick Start

Scan your repository for security vulnerabilities by running the skill against recent changes and deployments.

Frequently Asked Questions about security-auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I detect SQL injection and XSS vulnerabilities during a code review?▼

Security vulnerability detection scans code changes for OWASP Top 10 patterns like SQL injection and XSS. It uses Read, Grep, and Bash tools to identify issues, generating structured alerts with location, severity, and remediation steps.

Can I scan for exposed secrets before deployment?▼

Yes, you can scan for exposed secrets before deployment using automated security vulnerability detection. It integrates with secret-scanner workflows to identify exposed credentials in file changes and alerts you with structured remediation steps.

What is the best way to automate OWASP Top 10 checks for file changes?▼

Automating OWASP Top 10 checks for file changes is best handled by scanning for security vulnerabilities across your projects. This process detects authentication and authorization weaknesses, SQL injection, and XSS using Read, Grep, and Bash tools.

Does this security auditing tool integrate with existing code review workflows?▼

Yes, this security auditing tool integrates with existing code review workflows. It connects directly with the /review workflow and secret-scanner to deliver actionable security alerts during pre-deploy checks and routine file changes.

What information is included in security vulnerability alerts?▼

Security vulnerability alerts include the specific location of the issue, its severity level, and actionable remediation steps. These structured alerts cover detected OWASP Top 10 patterns like SQL injection, XSS, and exposed secrets.