Audits local branch changes for security vulnerabilities, logical bugs, and critical code quality issues.
This skill acts as a methodical security auditor and bug hunter for your local development branch, following a rigorous five-phase process to identify high-impact flaws. It begins by mapping the attack surface of your changes—identifying user inputs, database queries, and authentication checks—before running a comprehensive security checklist covering vulnerabilities like SQL injection, XSS, and broken access control. Designed for developers who need more than a linter, it prioritizes critical security risks and functional bugs over stylistic preferences, providing actionable fix suggestions and concrete evidence for every issue found.
主な機能
01Structured reporting with severity levels and concrete fix suggestions
02115 GitHub stars
03Comprehensive security checklist based on OWASP standards
04Automated attack surface mapping for user-facing inputs and queries
05False-positive verification by checking surrounding context and tests
06Methodical diff analysis ensuring every changed line is reviewed
ユースケース
01Reviewing authentication and authorization logic for new API endpoints
02Conducting a pre-PR security audit to catch vulnerabilities before code review
03Identifying logical edge cases and race conditions in complex feature updates
