skills.rest
wallter
wallterCOMMUNITY
Explore all skills by this author →
GitHub

trw-security-check

Audit the TRW MCP codebase for security vulnerabilities and unsafe patterns.

Updated Mar 25, 2026
Search Tags:#owasp#reporting#yaml#vulnerabilities#code-analysis#security-audit#deserialization
One-click install
npx skills add https://github.com/wallter/trw-mcp --skill trw-security-check
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: trw-security-check
Source: https://github.com/wallter/trw-mcp/tree/main/src/trw_mcp/data/codex/skills/trw-security-check
Command: npx skills add https://github.com/wallter/trw-mcp --skill trw-security-check

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill identifies security vulnerabilities and unsafe patterns in the TRW MCP codebase, helping teams reduce risk before deployment.

Core Features & Use Cases

  • Automated code audit: scans for common OWASP risk patterns such as unsafe subprocess usage, insecure YAML handling, path traversal, and secret exposure.
  • Scope-aware analysis: supports auditing a specific module or the entire repository, as directed by the user.
  • Compliance-ready reporting: outputs a structured security findings report with prioritized remediation.

Quick Start

Run a targeted security audit on a module or the full codebase to generate a structured report.

Frequently Asked Questions about trw-security-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run an OWASP security audit on my codebase?▼

An OWASP security audit scans your codebase for vulnerabilities like command injection and path traversal, outputting a structured findings report with prioritized remediation steps.

How can I detect unsafe YAML deserialization and command injection vulnerabilities?▼

Detecting unsafe YAML deserialization and command injection requires scanning the codebase for common OWASP risk patterns using automated code analysis, which identifies unsafe subprocess usage and insecure YAML handling.

Can I audit a specific module instead of the full repository for security risks?▼

Yes, you can audit a specific module instead of the full repository. The scope-aware analysis supports directing the security audit at a single module to identify risk areas and prioritize remediation locally.

What is included in a structured security findings report for code vulnerabilities?▼

A structured security findings report includes identified vulnerabilities and unsafe patterns, such as secrets exposure and input validation issues, mapped to OWASP risks with prioritized remediation actions for compliance.

Does this security audit check for path traversal and secrets exposure?▼

Yes, the security audit enforces checks for path traversal and secrets exposure. It actively scans the codebase to identify these risk areas alongside command injection and insecure YAML handling.

Related Skills

Explore More Software Engineering Skills→
apacheapache
79

magpie-dependency-audit

Scan project dependencies for known vulnerabilities and propose upgrades.

Official
Advanced
superagent-aisuperagent-ai
76

ci-cd-security

Identify security weaknesses in GitHub Actions workflow YAML files.

Official
Intermediate
wilstowilsto

security-audit

Audit code for OWASP Top 10 vulnerabilities and generate severity-ranked remediation reports.

Community
Advanced
allsmogallsmog
22

Vulnerability Patterns

Identify web vulnerability patterns and exploitation flows for whitebox penetration testing.

Community
Intermediate