How does the Security Audit skill identify vulnerabilities?

It follows a systematic checklist covering the OWASP Top 10, dependency management, authentication protocols, and input validation to ensure a comprehensive review.

Does it scan for hardcoded secrets?

Absolutely. Part of its core functionality is to detect API keys, credentials, and secrets committed to the repository and suggest secure management alternatives.

Can I use this for both frontend and backend code?

Yes, the skill covers full-stack security issues ranging from Cross-Site Scripting (XSS) on the frontend to SQL injection and broken access control on the backend.

What kind of output does it provide after an audit?

It provides a categorized list of findings (Critical to Low severity), clear remediation steps for each issue, and a summary of existing positive security practices.

Security Audit

Name: Security Audit
Author: s-hiraoku

bys-hiraoku

0•

安全与测试

Conducts comprehensive security reviews based on OWASP standards and industry best practices to identify and remediate code vulnerabilities.

The Security Audit skill provides a systematic framework for evaluating application security across multiple domains, including the OWASP Top 10, dependency management, and data handling. It empowers developers to proactively identify risks like injection flaws, broken access control, and insecure secret management within their codebase. By providing structured remediation steps and severity levels, it ensures that security gaps are addressed before deployment, making it an essential tool for maintaining high security standards in any software development project.

主要功能

01Dependency vulnerability scanning for third-party libraries

020 GitHub stars

03Comprehensive authentication and authorization logic review

04Systematic OWASP Top 10 vulnerability assessment and reporting

05Input validation and output encoding sanitization checks

06Severity-based reporting with detailed actionable remediation steps

使用场景

01Performing a pre-deployment security review of a new web application

02Auditing a legacy codebase for deprecated cryptographic practices or secret leaks

03Verifying that third-party dependencies are secure and up-to-date

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add s-hiraoku/synapse-a2a security-audit

For use in Claude.ai and ChatGPT

Download Skill