code-security-audit
Installation
SKILL.md
Code Security Audit
Unified security audit toolkit combining OWASP Top 10 vulnerability scanning, dependency analysis, secret detection, SSL/TLS verification, AI Agent security checks, and automated security scoring.
Overview
This skill merges the best of security-auditor and security-audit-toolkit into a comprehensive security auditing solution:
- ✅ OWASP Top 10 Vulnerability Detection - All 10 categories with code patterns
- ✅ Dependency Vulnerability Scanning - npm, pip, cargo, go modules
- ✅ Secret Detection - 70+ API key patterns, credentials, private keys, crypto wallets
- ✅ SSL/TLS Verification - Certificate validation, cipher suite checks
- ✅ AI Agent Security - Numeric risks, prompt injection, crypto wallet safety (NEW)
- ✅ Security Scoring - Quantified 0-100 security score
- ✅ Auto-Fix Suggestions - Actionable remediation recommendations
- ✅ Multi-Language Support - JS/TS, Python, Go, Java, Rust, PHP, Ruby, Solidity
- ✅ CI/CD Integration - GitHub Actions, GitLab CI templates