security

Audit codebases for OWASP Top 10 vulnerabilities and generate security reports.

2|1|Updated Mar 16, 2026
One-click install
npx skills add https://github.com/ByeongminLee/nextjs-claude-code --skill security-byeongminlee
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security
Source: https://github.com/ByeongminLee/nextjs-claude-code/tree/main/template/.claude/skills/security
Command: npx skills add https://github.com/ByeongminLee/nextjs-claude-code --skill security-byeongminlee

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Identifies and remediates security weaknesses in codebases by auditing for OWASP Top 10 vulnerabilities, secret exposures, injection flaws, and authentication gaps.

Core Features & Use Cases

  • Security posture assessment: automated checks across code, configs, and dependencies to surface high-risk issues.
  • Guided remediation planning: produces actionable recommendations and strategy guidance aligned with organizational security goals.
  • Use Case: For a new feature, run an audit to uncover potential vulnerabilities before release and generate a security report for the roadmap.

Quick Start

Run the security workflow to configure your security strategy and perform an initial audit.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my codebase for OWASP Top 10 vulnerabilities?

Audit your codebase for OWASP Top 10 vulnerabilities by running an automated security assessment that scans code, configs, and dependencies to surface high-risk issues and produce a guided remediation report.

What is the best way to check for secret exposures and injection flaws before a release?

Checking for secret exposures and injection flaws before a release is handled by running a feature-based security audit that validates your new code and generates a security report for your roadmap.

How does a security posture assessment identify authentication gaps?

A security posture assessment identifies authentication gaps by performing automated checks across your project's code and configurations, applying security rules to surface weaknesses and propose actionable remediations.

Can I generate a security report for a specific feature's code changes?

You can generate a security report for specific feature code changes by using the diff audit mode, which reviews the changes against a security strategy and writes the results to a security report file.

Do I need a security strategy file to run a vulnerability scan?

You do not need an existing strategy file to start, because the setup mode configures your initial security strategy and the audit workflow uses it to guide validation rules for the vulnerability scan.

What limitations should I expect when remediating security weaknesses in dependencies?

When remediating security weaknesses in dependencies, expect the audit to surface high-risk issues and propose remediations, but actual fixes require manual implementation guided by the generated security report.