security-auditor

To run an OWASP Top 10 security audit, the Skill scans web backends, APIs, and frontend code to detect vulnerabilities, classify severity levels, and output a structured remediation report with file locations and suggested fixes.

Checking JWT authentication involves reviewing authorization flows and token handling to detect security flaws, providing concrete remediation guidance and safe patterns to ensure secure session management.

Scanning for SQL injection and XSS vulnerabilities requires analyzing input validation and application code to identify security flaws, generating prioritized findings with severity levels and recommended code fixes for remediation.

Yes, you can use this for detecting hardcoded secrets by scanning infrastructure configuration and dependencies, identifying sensitive data exposure, and providing structured findings with recommended secure configuration examples.

Yes, the audit produces structured, prioritized reports with file locations, severity levels, and actionable fixes designed for developer handoff and direct CI integration to gate insecure code deployments.

Configuring CORS and CSP headers involves checking infrastructure configuration to identify misconfigurations, applying secure headers, and generating concrete examples for safe cross-origin resource sharing and content security policies.