Security

Analyze Intrale Platform code against OWASP Top 10 standards.

1|Updated Jun 26, 2025
One-click install
npx skills add https://github.com/intrale/platform --skill security-intrale
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Security
Source: https://github.com/intrale/platform/tree/main/.claude/skills/security
Command: npx skills add https://github.com/intrale/platform --skill security-intrale

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill acts as an automated security auditor, proactively identifying and mitigating vulnerabilities within the Intrale Platform codebase to ensure robust application security.

Core Features & Use Cases

  • Vulnerability Detection: Scans code changes and the entire platform against OWASP Top 10 and known security misconfigurations.
  • Automated Issue Reporting: Generates detailed security issues for high-risk findings, streamlining the remediation process.
  • Use Case: Before merging a new feature, run /security scan to automatically check for common security flaws like broken access control or hardcoded secrets, preventing potential breaches.

Quick Start

Use the security skill to scan the current code changes for vulnerabilities.

Frequently Asked Questions about Security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my code for OWASP Top 10 vulnerabilities before merging?

To scan code for OWASP Top 10 vulnerabilities before merging, run an automated security audit to detect broken access control, cryptographic failures, and injection flaws. This generates actionable reports and automated security issues for high-risk findings.

What is automated security auditing and how does it detect injection flaws?

Automated security auditing analyzes source code against established standards like OWASP Top 10 to detect injection flaws and broken access control. It identifies security misconfigurations and cryptographic failures by evaluating code changes and platform architecture.

Can I run a full security audit on my entire platform codebase?

Yes, you can run a full security audit on your entire platform codebase. The audit supports multiple modes including diff scanning and full platform analysis to identify hardcoded secrets, access control issues, and known security misconfigurations.

Does automated vulnerability detection work for pre-delivery security gates?

Automated vulnerability detection works for pre-delivery security gates by scanning code changes against OWASP standards. It prevents potential breaches by identifying broken access control and hardcoded secrets before new features are merged.

What is the best way to detect hardcoded secrets and broken access control?

The best way to detect hardcoded secrets and broken access control is using an automated security auditor that analyzes code against OWASP Top 10 standards. This process generates detailed security issues for high-risk findings to streamline remediation.