code-security-audit

Perform a focused security audit on specific components.

Process

1. Identify context:

   • Target specific files, modules, or API endpoints mentioned by the user

2. Analyze for security vulnerabilities:

   • Check for OWASP Top 10 vulnerabilities
   • Check for injection flaws (SQLi, Command Injection, XSS)
   • Verify authentication and authorization logic
   • Identify sensitive data exposure risks
   • Check for insecure dependencies (use WebSearch/WebFetch for known CVEs)

3. Synthesize findings into a Security Report

Output