security-checklist

To scan for hardcoded secrets before deployment, you can run a security audit using this Skill to automatically detect sensitive information and validate your code against defined security domain contracts.

Auditing exposed HTTP endpoints and authentication protocols is best handled by executing an automated security audit, which identifies unprotected HTTP surfaces and validates authentication mechanisms against risk-oriented security contracts.

You can validate security headers by running a comprehensive security audit that checks for the presence and correctness of security-related HTTP headers, ensuring compliance with domain contract definitions.

Yes, this security audit is fully applicable for compliance checks and vulnerability assessments, as it performs risk-oriented reviews of secrets, endpoints, and headers to proactively identify and mitigate risks.

Yes, executing `npm run audit:security` is required to run the risk assessment, as it triggers the comprehensive evaluation of your codebase against the defined security contracts and protocols.

The security audit requires adherence to predefined security domain contracts to function correctly, meaning its effectiveness is limited by the accuracy of those contract definitions and the scope of secrets, endpoints, and headers it is configured to check.