Audit code, configurations, and dependencies for security gaps.
npx skills add https://github.com/Q16G/aster --skill security-code-analysis
Please help me install this Agent Skill. Skill: security-code-analysis Source: https://github.com/Q16G/aster/tree/main/skills/code-audit/security-code-analysis Command: npx skills add https://github.com/Q16G/aster --skill security-code-analysis
代码安全审计的痛点在于需要系统性地识别攻击面、理解用户意图并按清单执行任务，从而提升发现率和复现性。
运行该技能以对指定代码目标路径触发端到端的代码安全审计流程。
High-intent search queries and answers about installing and using this skill.
A structured security code audit on a monorepo involves executing end-to-end static analysis, data-flow checks, and authorization reviews across the codebase to identify vulnerabilities and generate traceable evidence reports.
Data-flow analysis in static code security reviews tracks how sensitive data moves through an application, identifying potential vulnerabilities by evaluating entry points and ensuring end-to-end security requirements are met.
Yes, you can integrate static analysis and vulnerability checks into CI pipelines to perform parallel security audits on standalone codebases and multi-repo configurations, ensuring continuous compliance and automated code review.
Conducting an auth-review for a codebase requires evaluating authentication mechanisms and authorization structures through white-box review processes, mapping entry points, and verifying access controls against compliance requirements.
White-box security review supports multi-repo continuous integration scenarios by applying SAST and data-flow analysis across local offline environments or CI pipelines, delivering clear entry point reports and reusable audit templates.
buYoungAudit codebases against OWASP ASVS 5.0.0 and generate Markdown security reports.
ZateGenerate structured security audit reports with findings, severity, and ASVS mappings.
ValyntAutomate security validation of the ValueOS codebase with SAST, DAST, and secret scanning.
adaptive-enforcement-labAutomate SAST, dependency, and container security scans in CI/CD pipelines.
