code-security-audit
Code Security Audit Capabilities
OWASP 4-source integrated code security audit system for universal codebase analysis.
Knowledge Sources
- OWASP ASVS 5.0.0: 345 verification requirements across 17 security domains (L1/L2/L3)
- OWASP API Security Top 10 2023: 10 API-specific risk categories with code-level indicators
- OWASP CheatSheet Series: 109 practical secure coding cheat sheets for remediation guidance
- OWASP WSTG (Web Security Testing Guide): 12 testing categories with 120+ test scenarios
Source Roles
| Source | Role | Usage |
|---|---|---|
| ASVS 5.0.0 | Verification requirements baseline | Defines what to check — structured requirements per domain |
| API Security Top 10 2023 | Risk taxonomy | Defines what to look for — API-specific threat patterns |
| CheatSheet Series | Implementation guidance | Defines how to fix — secure coding patterns and practices |
| WSTG | Test methodology | Defines how to verify — concrete test scenarios per vulnerability |
More from buyoung/skills
agents-md-generator
Analyze repository structure and generate or update standardized AGENTS.md files that serve as contributor guides for AI agents. Supports both single-repo and monorepo structures. Measures LOC to determine character limits and produces structured documents covering overview, folder structure, patterns, conventions, and working agreements. Update mode refreshes only the standard sections while preserving user-defined custom sections. Use when setting up a new repository, onboarding AI agents to an existing codebase, updating an existing AGENTS.md, or when the user mentions AGENTS.md.
27typst-creator
Generate Typst source code for documents, reports, papers, and presentations, covering markup, math, scripting, and layout syntax.
20biz-opportunity-scout
Identify and validate profitable business opportunities by analyzing market size (TAM/SAM/SOM), unit economics, competitive landscape, and PMF indicators. Generates comprehensive HTML reports with opportunity scorecards.
20skill-maker
Generates AI agent skill packages with SKILL.md, optional bundled resources (scripts/, references/, assets/), and README.md integration.
18jetbrains-vmoptions
>
18kysely-converter
Capable of converting raw SQL queries into type-safe Kysely TypeScript code. Knows how to handle various SQL dialects and complex query structures.
14