What problem does it solve? Manual security reviews are slow and inconsistent, often missing entire vulnerability classes. This Skill performs a systematic security audit of a codebase, recent changes, or a specific attack surface, and produces triaged findings with severity, exploitability, and remediation steps. ## Core Features & Use Cases - Full codebase audits: Maps entry points and trust boundaries, then checks all major vulnerability categories including injection, authentication, authorization, data exposure, cryptography, and denial of service. - Change-focused reviews: Uses git history to review recent commits for security regressions and newly introduced attack surface. - Targeted attack-surface audits: Traces data flow through a specific feature such as an authentication flow, testing it against OWASP categories. - Structured reporting: Every finding includes file path, line number, vulnerable code, a realistic attack scenario, CVSS estimate, CWE reference, and remediation code, ending with a triage summary and prioritized action plan. - Use Case: Before a release, ask for an audit of the last 7 days of changes to catch a SQL injection or hardcoded secret introduced in a recent commit before it ships. ## Quick Start Ask the agent to audit the authentication flow for security vulnerabilities and produce a triaged report.
