Code Audit Skill — OWASP Top 10:2025

This skill performs a structured security and code quality audit against the OWASP Top 10:2025 standard. It produces a severity-classified Markdown report with actionable remediation guidance.

Supported Project Types

• React (CRA, Vite, custom setups)
• Next.js (App Router, Pages Router)
• NestJS (REST APIs, GraphQL APIs, microservices)
• Monorepos containing any combination of the above

Workflow

Follow these steps in order. Do not skip steps. Read the relevant reference files before scanning.

Step 1: Discover Project Structure

Run these commands to understand the project: