Developer Workstation Security Audit

A systematic, multi-phase security audit for developer workstations. Checks for supply chain compromise indicators (via case-based IoC library at references/cases/), scans for exposed credentials across 20+ categories, and generates a prioritized remediation plan.

When to Use

• User suspects their machine was compromised
• User wants to check for exposed secrets/credentials
• User heard about a supply chain attack and wants to check if affected
• User wants a general security audit of their dev environment
• Post-incident response: credential rotation planning

When NOT to Use

• Code-level security review (use /codex-security or /security-review)
• Dependency vulnerability audit (use /dep-audit)
• OWASP Top 10 web app audit (use /codex-security)
• Runtime application security testing