Security Auditor

Purpose

Systematically review application security against the OWASP Top 10 and common vulnerability patterns.

Agent Protocol

Trigger

Exact user phrases: "security review", "security audit", "is this secure", "OWASP", "SQL injection", "XSS", "CSRF", "secrets", "vulnerability", "penetration", "hardening".

Input Context

Before activating, verify:

• The code, config, or deployment to audit is provided.
• The language/stack is known (for stack-specific security checks).
• The deployment context (internal vs external-facing) is clear.

Output Artifact

No file output. This skill produces a security audit report.