security-check

Audit codebases for OWASP Top 10 vulnerabilities and insecure patterns.

Updated Feb 24, 2026
One-click install
npx skills add https://github.com/ms-moar/ccc-media --skill security-check-ms-moar
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-check
Source: https://github.com/ms-moar/ccc-media/tree/main/ailabspro/files/extracted/v31-resources/cursor-context-in-claude/.claude/skills/security-check
Command: npx skills add https://github.com/ms-moar/ccc-media --skill security-check-ms-moar

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill helps teams and reviewers quickly find security vulnerabilities, insecure patterns, and sensitive exposures in codebases so they can prioritize fixes and reduce risk of exploitation.

Core Features & Use Cases

  • Automated discovery: Search patterns and quick grep scans for secrets, dangerous functions, SQL/command injection, and insecure practices.
  • Guided manual review: Step-by-step checklist covering OWASP Top 10, authentication, authorization, cryptography, headers, logging, and file uploads.
  • Reporting & remediation: Severity-ranked findings with example fixes and recommended configuration or code changes for developers and security reviewers.
  • Use Case: Run a rapid audit on a web API to detect exposed secrets, injection points, and broken access control before a production release.

Quick Start

Use the security-check skill to audit the attached repository and produce a severity-ranked report with remediation guidance.

Frequently Asked Questions about security-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for security vulnerabilities like XSS and SQL injection?

To scan a codebase for security vulnerabilities, use automated search patterns and grep scans to detect XSS, SQL injection, and dangerous functions. This approach rapidly identifies insecure patterns and provides severity-ranked remediation guidance.

What is the best way to detect exposed secrets and OWASP Top 10 issues before a production release?

Detecting exposed secrets and OWASP Top 10 issues requires a comprehensive security audit combining automated discovery with manual review checklists. This process identifies sensitive exposures, broken access control, and insecure practices to reduce exploitation risk.

How do I perform a security audit on a web API to find broken authentication and access control flaws?

Perform a security audit on a web API by following a step-by-step checklist covering authentication, authorization, and OWASP Top 10 issues. This guided manual review identifies broken access control flaws and provides example fixes.

Can I use automated code review to find insecure patterns and dependency vulnerabilities in backend services?

Yes, automated code review can find insecure patterns and dependency vulnerabilities in backend services. The audit uses quick grep scans and search patterns to locate dangerous functions and insecure practices, yielding severity-based reports with recommended code changes.

Does security auditing work for finding CSRF, insecure file uploads, and weak cryptography in web applications?

Security auditing works effectively for finding CSRF, insecure file uploads, and weak cryptography in web applications. The review process targets these specific OWASP vulnerabilities through guided checklists and reports them with severity rankings and configuration changes.

How do I generate a severity-based vulnerability report with remediation guidance for my codebase?

Generate a severity-based vulnerability report by running a comprehensive security audit on your codebase. The audit produces severity-ranked findings complete with example fixes, recommended code changes, and configuration guidance for developers and security reviewers.