security-audit

Identify vulnerabilities, exposed secrets, authorization flaws, unsafe dependencies, and cryptographic weaknesses.

SKILL.md

GitHub

Security Audit

Audit Checklist

  • Secret Hygiene: Scan repository for hardcoded tokens, passwords, private keys, or .env files.
  • Authorization Boundaries: Verify all mutations and sensitive queries require valid authentication and authorization tokens.
  • Injection Prevention: Parameterized SQL, sanitized command execution (no raw shell string interpolation), and XSS prevention.
  • Dependency Scrutiny: Run dependency vulnerability checks (npm audit, pip-audit, or safety).
  • Audit Trail: Verify sensitive operational decisions are recorded in a tamper-evident, append-only ledger.

Related in security

git-workflow

Git workflow guidance for commits, branches, and pull requests

by agno-agi
37,144

clerk-observability

Implement monitoring, logging, and observability for Clerk authentication. Use when setting up monitoring, debugging aut...

by jeremylongshore
1,061

juicebox-migration-deep-dive

Advanced Juicebox data migration strategies. Use when migrating from other recruiting platforms, performing bulk data im...

by jeremylongshore
1,061