skills.rest
ybbms777
ybbms777COMMUNITY
Explore all skills by this author →
GitHub

security-sentinel

Audit JavaScript and Rails codebases for OWASP Top 10 vulnerabilities.

1|Updated Apr 4, 2026
Search Tags:#code review#security audit#injection prevention#secret detection#vulnerability scanning#auth audit#OWASP compliance
One-click install
npx skills add https://github.com/ybbms777/compound-engineering --skill security-sentinel-ybbms777
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-sentinel
Source: https://github.com/ybbms777/compound-engineering/tree/main/skills/agent-security-sentinel
Command: npx skills add https://github.com/ybbms777/compound-engineering --skill security-sentinel-ybbms777

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill eliminates the risk of deploying code with unpatched security vulnerabilities that could lead to data breaches, compliance violations, or unauthorized access to sensitive user and system data.

Core Features & Use Cases

  • Comprehensive Vulnerability Scanning: Automatically checks for OWASP Top 10 risks including SQL injection, cross-site scripting (XSS), broken authentication, and sensitive data exposure.
  • Multi-Framework Audit Coverage: Reviews input validation, hardcoded secrets, CSRF protection, security headers, and dependency vulnerabilities across JavaScript and Rails codebases.
  • Actionable Reporting: Delivers prioritized findings with severity ratings, proof-of-concept details, and step-by-step remediation guidance for development teams.
  • Real-World Use Case: Before releasing a new user account management feature, run this audit to catch missing authorization checks or hardcoded API keys before they reach production.

Quick Start

Use the security-sentinel skill to run a full security audit of your current code branch and receive a prioritized list of vulnerabilities with clear remediation steps.

Frequently Asked Questions about security-sentinel

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is a pre-deployment security audit for web applications?▼

A pre-deployment security audit identifies exploitable vulnerabilities in web and API applications before release. It checks for OWASP Top 10 risks like SQL injection and cross-site scripting to prevent data breaches and compliance violations in production.

How do I check my codebase for hardcoded secrets and missing authorization checks?▼

Run a comprehensive vulnerability scan on your JavaScript or Rails codebase to detect hardcoded API keys and missing authorization checks. The audit reviews input validation and delivers prioritized remediation steps for these security gaps.

Does this security audit tool support JavaScript and Rails frameworks?▼

Yes, the security audit supports multi-framework coverage for both JavaScript and Rails codebases. It specifically reviews input validation, security headers, CSRF protection, and dependency vulnerabilities across these environments.

How do I validate OWASP Top 10 compliance for my API?▼

To validate OWASP Top 10 compliance for your API, run a full security audit on your code branch. This checks for broken authentication, sensitive data exposure, and injection risks, providing proof-of-concept details for compliance validation.

What is the best way to find SQL injection and XSS vulnerabilities before release?▼

The best way to find SQL injection and XSS vulnerabilities is to perform an automated vulnerability scan on your current code branch. This process checks for OWASP Top 10 risks and provides actionable reporting with prioritized remediation steps.

What specific vulnerabilities does an OWASP compliance audit cover?▼

An OWASP compliance audit covers critical risks including SQL injection, cross-site scripting (XSS), broken authentication, and sensitive data exposure. It also reviews CSRF protection, security headers, and dependency vulnerabilities for JavaScript and Rails codebases.

Related Skills

Explore More Software Engineering Skills→
sovriumsovrium
3

security-scanner

Identify security vulnerabilities in codebases via static analysis.

Official
Advanced
sgcarstrendssgcarstrends
21

security-audit

Audit codebases for OWASP Top 10 vulnerabilities and generate prioritized remediation reports.

Official
Advanced
riftzen-bitriftzen-bit

springboot-security

Identify and remediate security misconfigurations in Java Spring Boot services.

Community
Advanced
zangxin75zangxin75

security-reviewer

Conduct security audits and code vulnerability reviews with SAST scans.

Community
Advanced