skills.rest
jikig-ai
jikig-aiOFFICIAL
Explore all skills by this author →
GitHub

security-sentinel

Identify and report security vulnerabilities in codebases with OWASP Top 10 coverage.

12|2|Updated Jan 27, 2026
Search Tags:#security#vulnerability#owasp#secrets#code-review#audits
One-click install
npx skills add https://github.com/jikig-ai/soleur --skill security-sentinel-jikig-ai
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-sentinel
Source: https://github.com/jikig-ai/soleur/tree/main/.openhands/skills/security-sentinel
Command: npx skills add https://github.com/jikig-ai/soleur --skill security-sentinel-jikig-ai

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill enables security auditing of codebases by identifying vulnerabilities, misconfigurations, and insecure patterns before deployment, reducing the risk of breaches and data loss.

Core Features & Use Cases

  • Input Validation Analysis: Systematically searches for input points and ensures proper validation, sanitization, and type checks.
  • SQL Injection Risk Assessment: Detects raw queries and unsafe string concatenations, recommending parameterized queries.
  • XSS Vulnerability Detection: Checks output points for unsafe rendering and enforces escaping and proper content security policies.
  • Authentication & Authorization Audit: Maps endpoints to verify correct authentication and authorization at routes and resources.
  • Sensitive Data Exposure: Flags hardcoded secrets and ensures encryption for data at rest/in transit.
  • OWASP Alignment: Documents coverage for OWASP Top 10 categories and remediation guidance.

Quick Start

Run a full security audit on your codebase and generate a prioritized remediation plan.

Frequently Asked Questions about security-sentinel

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my codebase for OWASP Top 10 vulnerabilities before deployment?▼

To audit codebases for OWASP Top 10 vulnerabilities before deployment, run static and dynamic checks across input validation, authentication, and data handling to identify risks and generate a prioritized remediation plan.

What is the best way to detect hardcoded secrets and sensitive data exposure in source code?▼

Detecting hardcoded secrets requires scanning codebases for insecure patterns to flag exposed credentials and verify encryption enforcement for data at rest and in transit, providing concrete remediation recommendations.

How do I check for SQL injection and XSS vulnerabilities in web applications?▼

Checking for SQL injection and XSS vulnerabilities involves analyzing input points and output rendering to detect unsafe string concatenation, enforcing parameterized queries, proper escaping, and content security policies.

Can I use this security audit for microservices and mobile backends?▼

Yes, this security audit applies to microservices and mobile backends by systematically mapping endpoints to verify correct authentication and authorization across routes and third-party integrations.

Why does authentication and authorization audit require mapping endpoints to resources?▼

Authentication and authorization audits require mapping endpoints to resources to verify that correct access controls are enforced at every route, preventing unauthorized exploitation and data breaches.

Related Skills

Explore More Software Engineering Skills→
brittaniebuffiecsubrittaniebuffiecsu
1

requesting-code-review

Automate code review with security scans, baseline tests, and an independent reviewer.

Community
Advanced
zapabobzapabob
2

sec-audit

Scan dependencies and custom code for security vulnerabilities.

Community
Advanced
DevelopersGlobalDevelopersGlobal
65

ci-cd-pipelines

Automate CI/CD pipelines with quality gates and deployment processes.

Official
Advanced
tiandiyiqitiandiyiqi

senior-security

Perform security audits and penetration testing with Python scripts.

Community
Advanced