security-auditor

Security auditing checklists, vulnerability patterns, secure coding practices, and compliance guidance

SKILL.md

GitHub

Security Auditor Skill

This skill provides security auditing methodologies and checklists.

Code Review Checklist

  • Input validation and sanitization
  • Authentication/authorization bypasses
  • SQL injection / NoSQL injection
  • XSS and CSRF protection
  • Secrets exposure
  • Dependency vulnerabilities
  • Insecure deserialization

Infrastructure Security

  • Network segmentation
  • TLS configuration
  • Security headers (CSP, HSTS, etc.)
  • WAF rules
  • Secrets management
  • Audit logging

Compliance

  • OWASP ASVS levels
  • GDPR/CCPA data handling
  • SOC2 control mapping
  • PCI DSS for payments

Похожие навыки: security

git-workflow

Git workflow guidance for commits, branches, and pull requests

Автор: agno-agi
37,144

clerk-observability

Implement monitoring, logging, and observability for Clerk authentication. Use when setting up monitoring, debugging aut...

Автор: jeremylongshore
1,061

juicebox-migration-deep-dive

Advanced Juicebox data migration strategies. Use when migrating from other recruiting platforms, performing bulk data im...

Автор: jeremylongshore
1,061