security-audit
Run a security audit of a module or PR. Use when asked to check security or before merging sensitive changes.
SKILL.md.claude/skills/security-audit/SKILL.md
GitHubSecurity Audit
Audit the code for security vulnerabilities: $ARGUMENTS
OWASP Top 10 Checks
See owasp-checklist.md for full checklist.
Process
- Read all files in the target path
- Check against each OWASP category
- Look for hardcoded secrets (grep for KEY, SECRET, PASSWORD, TOKEN)
- Check for SQL injection vectors
- Check for XSS vectors
- Check for broken access control
- Report findings with severity: Critical/High/Medium/Low