Web Security Audit Skill

Multi-language static code security audit for web applications. Covers PHP, Java, Python, and Go.

Trigger

Use this skill when the user asks to:

• "审计代码安全" / "audit my code" / "scan for vulnerabilities"
• "检查漏洞" / "find security issues"
• "代码安全审查" / "code security review"
• "生成 Security.md"
• Mentions any of: SQL injection, XSS, RCE, SSRF, XXE, deserialization, path traversal, SSTI, file upload, open redirect, hardcoded secrets

Workflow

Step 1: Determine scope