Auditing Security

Overview

Comprehensive security analysis to identify vulnerabilities, assess risk, and provide remediation guidance aligned with industry standards (OWASP Top 10, CVSS scoring).

Inputs:

• Codebase to audit
• docs/system-design.md - Architecture context
• docs/api-contracts.yaml - API specifications
• docs/feature-spec/F-##-*.md - Feature implementations

Outputs:

• Security findings organized by severity (CRITICAL, HIGH, MEDIUM, LOW)
• CVSS scores and OWASP Top 10 mapping
• Exploit scenarios and remediation code
• Risk-prioritized remediation plan

Quick Start