security-auditor

Security auditing checklists, vulnerability patterns, secure coding practices, and compliance guidance

Files1

View on GitHub

SKILL.md

GitHub

Security Auditor Skill

This skill provides security auditing methodologies and checklists.

Code Review Checklist

  • Input validation and sanitization
  • Authentication/authorization bypasses
  • SQL injection / NoSQL injection
  • XSS and CSRF protection
  • Secrets exposure
  • Dependency vulnerabilities
  • Insecure deserialization

Infrastructure Security

  • Network segmentation
  • TLS configuration
  • Security headers (CSP, HSTS, etc.)
  • WAF rules
  • Secrets management
  • Audit logging

Compliance

  • OWASP ASVS levels
  • GDPR/CCPA data handling
  • SOC2 control mapping
  • PCI DSS for payments

Related in security

git-workflow

Git workflow guidance for commits, branches, and pull requests

by agno-agi
37,144

clerk-observability

Implement monitoring, logging, and observability for Clerk authentication. Use when setting up monitoring, debugging aut...

by jeremylongshore
1,061

juicebox-migration-deep-dive

Advanced Juicebox data migration strategies. Use when migrating from other recruiting platforms, performing bulk data im...

by jeremylongshore
1,061