skills.rest
wollfoo
wollfooCOMMUNITY
Explore all skills by this author →
GitHub

security-auditor

Scan, audit, and fix code vulnerabilities across programming languages and frameworks.

Updated Nov 20, 2025
Search Tags:#security#vulnerability#owasp#audit#fix#scan#code hardening
One-click install
npx skills add https://github.com/wollfoo/codex-cli --skill security-auditor-wollfoo
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-auditor
Source: https://github.com/wollfoo/codex-cli/tree/main/skills/security-auditor
Command: npx skills add https://github.com/wollfoo/codex-cli --skill security-auditor-wollfoo

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill acts as an enterprise security engineer to automatically scan, audit, and fix code vulnerabilities, ensuring your codebase is hardened against threats.

Core Features & Use Cases

  • Scan: Perform quick, automated scans for secrets, CVEs, and misconfigurations.
  • Audit: Conduct deep OWASP Top 10 code reviews with severity-rated findings.
  • Fix: Auto-generate security patches with before/after code comparisons.
  • Use Case: When reviewing code security, finding vulnerabilities, hardening dependencies, or generating security reports, this Skill provides actionable insights and automated fixes.

Quick Start

Scan the current project for security vulnerabilities.

Frequently Asked Questions about security-auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan code for security vulnerabilities and hardcoded secrets?▼

Scanning code for security vulnerabilities is automated by identifying hardcoded secrets, dependency CVEs, and common misconfigurations. It provides detailed reports and auto-generated patches for comprehensive security assessments.

How do I audit code against the OWASP Top 10 guidelines?▼

Auditing code against OWASP Top 10 guidelines involves conducting deep code reviews to identify security flaws. The process generates severity-rated findings to help prioritize and address vulnerabilities across various programming languages and frameworks.

Can I automatically fix dependency vulnerabilities and CVEs in my project?▼

Yes, you can automatically fix dependency vulnerabilities and CVEs by applying auto-generated security patches. The tool performs dependency analysis and provides before/after code comparisons to harden your codebase against threats.

What is the best way to generate security patches with before and after code comparisons?▼

The best way to generate security patches is by using automated pattern matching and dependency analysis to identify flaws. It produces detailed before/after code comparisons to ensure your codebase is hardened against threats.

Does automated vulnerability scanning work across various programming languages and frameworks?▼

Automated vulnerability scanning works across various programming languages and frameworks by utilizing pattern matching and dependency analysis. It identifies security flaws and common misconfigurations regardless of the specific tech stack used.

Related Skills

Explore More Software Engineering Skills→
microsoftmicrosoft
1.4k

azure-app-onboard-prereq

Evaluate source code repositories for Azure deployment readiness.

Official
Advanced
adityaarsharmaadityaarsharma
2

orbit-qa-regression-pack

Manage regression test suites with Playwright and CI pipelines.

Community
Advanced
eliottbusinesseliottbusiness

requesting-code-review

Automate pre-commit code review with static analysis and security scanning.

Community
Advanced
amano--amano--

burp-suite

Intercept HTTP traffic and test web applications for security vulnerabilities.

Community
Advanced