Security Audit

Overview

Security auditing identifies vulnerabilities and security issues in applications. This skill should be invoked when assessing application security, before production deployment, or for compliance requirements.

Core Principles

• Defense in Depth: Multiple layers of security
• Least Privilege: Minimal permissions required
• Dependency Scanning: Check for vulnerable libraries
• OWASP: Focus on common vulnerability classes

Preparation Checklist

• Choose security tools
• Define audit scope
• Gather application architecture
• Review authentication flow