Security Audit

Coordinate the repository's focused security skills into one read-only review. Select only checks that apply to the target, preserve the evidence and limitations of each check, and never treat a risky setting as proof of a vulnerability or compromise.

Prerequisites

• A local repository, a user-supplied URL, or both.
• Browser automation such as Playwright MCP only when the selected profile includes a website.
• Companion skills improve coverage when installed, but this skill must report missing checks rather than pretending they ran.

Trigger

• "Run a security audit"
• "Review this repository for security risks"
• "Give this release a security gate"
• "Audit this app and website"
• "Which security checks should I run?"
• "Check the latest exploited CVEs against this project"
• "Audit this Railway deployment's exposure"