Security Audit Skill

Goal

Identify security vulnerabilities in code, dependencies, and configuration using OWASP Top 10 as the primary framework. Produce an actionable report with severity ratings and specific remediation steps.

Steps

1. Run automated scanning tools

   Dependency vulnerabilities (SCA):

   npm audit --audit-level=moderate    # Node.js
   composer audit                       # PHP
   uv pip audit                         # Python (or pip-audit)
   bandit -r src/                       # Python SAST
   pip-audit                            # Python
   snyk test                            # Cross-platform (if Snyk configured)