security-review

Security audits identify vulnerabilities, hardcoded secrets, and compliance gaps in your codebase using static analysis and scanning tools. This Skill performs pre-deployment security reviews by checking authentication controls, data protection measures, dependency vulnerabilities, and sensitive data exposure to produce actionable remediation steps.

A comprehensive security audit examines authentication and authorization token handling, data encryption and input sanitization, secure logging practices, dependency vulnerabilities via npm audit, and infrastructure exposure. It identifies parameterized query usage, environment variable isolation, and hardcoded secrets to prevent production breaches.

Run security reviews during pre-production deployments and before security-sensitive code changes to catch vulnerabilities early. This is critical when handling authentication, managing sensitive data, integrating external dependencies, or making infrastructure changes to ensure compliance and prevent exposure.

Yes, this Skill performs integrated scanning that simultaneously detects hardcoded secrets, runs npm audit for dependency vulnerabilities, and flags compliance gaps. It combines static analysis with shell-based scanning to report all security issues in a single actionable output.

A security audit produces detailed remediation guidance identifying specific vulnerabilities, their locations in code, severity levels, and recommended fixes. The output covers authentication gaps, data protection issues, dependency vulnerabilities, and infrastructure exposure with steps to address each finding.

This Skill uses shell-based scanning with standard tools like grep and bash for static analysis, plus npm audit for dependency checks. No specialized infrastructure is required beyond a standard development environment with access to your MuRP codebase and Node.js tooling.