skills.rest
drhazemibclc
drhazemibclcCOMMUNITY
Explore all skills by this author →
GitHub

security-sentinel

Audit code, configurations, and deployments for security vulnerabilities and remediation.

Updated Mar 22, 2026
Search Tags:#authorization#security#authentication#vulnerability#owasp#audit#code-review
One-click install
npx skills add https://github.com/drhazemibclc/plate --skill security-sentinel-drhazemibclc
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-sentinel
Source: https://github.com/drhazemibclc/plate/tree/main/.codex/skills/security-sentinel
Command: npx skills add https://github.com/drhazemibclc/plate --skill security-sentinel-drhazemibclc

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill provides rigorous security auditing to identify vulnerabilities across code, configurations, and deployments, helping teams preempt security issues before they reach production.

Core Features & Use Cases

  • Input Validation Analysis: Detect unvalidated input paths and ensure proper sanitization.
  • Authentication & Authorization Audit: Verify access controls and session management across endpoints.
  • Sensitive Data Exposure & Secrets Scanning: Detect hardcoded keys, tokens, and secrets in code and configs.
  • OWASP Compliance Guidance: Assess against OWASP Top 10 and provide remediation guidance.

Quick Start

Run the security-sentinel agent to kick off a security review of your repository.

Frequently Asked Questions about security-sentinel

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my code for OWASP Top 10 vulnerabilities before deployment?▼

Security audits identify and remediate vulnerabilities across code, configurations, and deployments by analyzing inputs, authentication, authorization, and data handling against OWASP controls during code reviews or CI pipelines.

How do I scan my repository for hardcoded secrets and tokens?▼

Scanning for hardcoded secrets detects keys, tokens, and sensitive information in code and configurations, providing guidance for remediation to prevent sensitive data exposure across your deployment environments.

Can I integrate a security audit into my CI pipeline for code reviews?▼

Yes, you can apply security audits during code reviews and CI pipelines to enforce input validation, parameterized queries, proper security headers, and verify access controls across endpoints before deployment.

What is the best way to check input validation and authorization controls in my application?▼

The best way to check input validation and authorization is to audit unvalidated input paths, verify access controls and session management across endpoints, and enforce proper sanitization against OWASP compliance standards.

Does this security audit work for configurations and deployment settings, or just source code?▼

This security audit works across code, configurations, and deployments, assessing input validation, authentication, authorization, data handling, and security headers to uncover vulnerabilities throughout your entire pipeline.

Related Skills

Explore More Software Engineering Skills→
salmanabdurrahmansalmanabdurrahman

supply-chain-cicd

Analyze CI/CD pipeline configurations for injection vectors, secret exposure, and access controls.

Community
Advanced
flavien-iaflavien-ia
34

security

Audit Next.js and T3 stack applications for security vulnerabilities across twelve categories.

Community
Advanced
lengo0951lengo0951

ck:security-scan

Scan codebases for vulnerabilities, hardcoded secrets, and dependency issues.

Community
Advanced
VSF-QC-TTSVSF-QC-TTS

common-dast-tooling

Standardize dynamic application security testing across web applications and APIs.

Official
Advanced