security

Audit code and configurations for OWASP Top 10 vulnerabilities and authentication weaknesses.

1|Updated Feb 8, 2026
One-click install
npx skills add https://github.com/goranjovic55/xdccarr --skill security-goranjovic55
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security
Source: https://github.com/goranjovic55/xdccarr/tree/main/.github/skills/security
Command: npx skills add https://github.com/goranjovic55/xdccarr --skill security-goranjovic55

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Security vulnerabilities, injection risks, authentication weaknesses, and OWASP compliance create risk and slow down development. This skill provides structured patterns and checks to identify and remediate such issues early.

Core Features & Use Cases

  • OWASP-aligned checks and patterns for common vulnerabilities
  • Reusable templates and risk remediation guidance
  • Triggers and automation hooks for CI and reviews

Quick Start

Run security audits against your codebase using the provided patterns and checks to identify vulnerabilities and remediate them with recommended fixes.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security audits to find injection risks and authentication weaknesses?

Automate security audits by applying structured patterns and checks to your codebase to identify injection risks, authentication weaknesses, and OWASP Top 10 vulnerabilities. The skill provides ready-to-use templates to detect and remediate these issues during code reviews.

What is the best way to check my code for OWASP Top 10 vulnerabilities?

Checking code for OWASP Top 10 vulnerabilities involves running automated audits against your backend and frontend codebases. This skill enforces security patterns like parameterized queries and input sanitization to proactively identify and fix compliance gaps.

Can I integrate vulnerability scanning into my CI pipeline?

Yes, you can integrate vulnerability scanning into CI pipelines using the skill's automation hooks and triggers. It applies security rules and checks during continuous integration scans to identify risks early in the development lifecycle.

Does this security audit tool work for both frontend and backend codebases?

Yes, this security audit tool works for both frontend and backend codebases. It evaluates code and configurations during design reviews and CI scans to enforce best practices like proper secret management and input sanitization across your stack.

How do I remediate code vulnerabilities found during a security review?

Remediate code vulnerabilities by applying the skill's recommended fixes and reusable templates. It provides risk remediation guidance and enforces security patterns like parameterized queries and proper secret management to resolve identified injection risks.