Does it provide code-level fix recommendations?

Yes, every finding is paired with implementation guidance sourced from the OWASP CheatSheet Series to help you remediate issues quickly.

What does the security report include?

The output is a Markdown report containing an executive summary, a severity-ranked findings table with CWE IDs, domain-specific analysis, and a prioritized remediation roadmap.

Which security standards does this skill use?

It integrates four primary OWASP sources: ASVS 5.0.0 for requirements, API Security Top 10 for risk patterns, CheatSheet Series for fixes, and WSTG for testing methodology.

Can I audit specific parts of my codebase?

Absolutely. You can narrow the scope to specific directories, files, or focus areas like authentication, cryptography, or input handling.

Can I specify the depth of the security audit?

Yes, you can select ASVS Level 1 for baselines, Level 2 for sensitive data applications, or Level 3 for mission-critical systems.

Code Security Audit

Name: Code Security Audit
Author: buYoung

bybuYoung

•

Security & Testing

Conducts comprehensive OWASP-aligned security reviews to detect vulnerabilities and provide structured remediation guidance.

The Code Security Audit skill transforms Claude into a specialized security researcher by integrating four core OWASP knowledge sources: ASVS 5.0.0 for verification, API Security Top 10 for risk taxonomy, CheatSheet Series for remediation, and WSTG for testing methodologies. It systematically audits codebases across domains like authentication, cryptography, and input handling, delivering a professional Markdown report that ranks findings by severity and maps them to industry standards. It is an essential tool for developers who need to ensure their applications meet rigorous security requirements before deployment or during architectural reviews.

Key Features

01OWASP ASVS 5.0.0 (L1-L3) Verification

02Comprehensive Markdown Report Generation

03API Security Top 10 Risk Detection

04Actionable Remediation via CheatSheet Series

05Automated Vulnerability Pattern Matching

0610 GitHub stars

Use Cases

01Validating application security against industry benchmarks before production release

02Providing developers with concrete secure coding patterns to fix identified weaknesses

03Auditing REST and GraphQL APIs for authorization and resource consumption risks

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add buyoung/skills code-security-audit

For use in Claude.ai and ChatGPT