Security Audit (OWASP Standards)

Use this skill to perform a "Paranoid Mode" security sweep.

Inputs

• Scope: The directory to audit.
• Depth: Full scan or quick check.

Tooling Strategy

• Use grep_search to find secrets ("API_KEY", "password") and vulnerable patterns (innerHTML, eval).
• Use view_file to check auth logic.

Workflow

1. Secrets Detection (Credentials)

• Scan: Look for API keys, passwords, tokens, or private keys.
• Fix: Move to .env. Add .env to .gitignore.