Security Audit Workflow

Systematic security assessment that prioritizes CRITICAL/HIGH findings early, and optionally includes MEDIUM findings later (without letting them distract from higher impact work).

How To Start (Natural Language)

Tell me what you want audited and provide the smallest useful scope:

• A whole repo or directory (where the entry points are)
• A specific area/module (what it does, what inputs it accepts)
• A single file (how it is called, what data flows into it)
• A code snippet (what file/function it belongs to, what types/inputs it receives)

If the scope is small (single file/snippet), explicitly list assumptions and what context would change the risk rating.

Core Principles