security-auditor

To audit code for OWASP Top 10 vulnerabilities, the skill analyzes programming projects by applying secure coding practices to identify injection, authentication, and session flaws. It returns structured findings with severity ratings, rationale, and concrete remediation steps.

Performing a security risk assessment on API endpoints involves evaluating authentication and authorization logic, input validation, and session management. The skill maps discovered vulnerabilities to OWASP categories and provides actionable steps to reproduce and mitigate security risks.

Yes, you can use it for dependency management and finding secrets in code. The skill specifically assesses dependency vulnerabilities and insecure direct object references by applying secure coding best practices to deliver clear risk explanations and reproducible mitigations.

Yes, the security audit supports multiple programming languages. It applies the OWASP Top 10 and secure coding practices across languages to find and report security vulnerabilities with severity-rated findings and concrete remediations.

To get actionable remediation steps from a code review, the skill requires structured findings that map vulnerabilities to OWASP categories. It provides severity ratings, demonstrates risk assessment, and outputs concrete steps to mitigate identified security flaws.