Skip to content
Agentmart
Submit a tool

security-audit

Perform a security audit of the codebase.

Skill by yu-iskw

IndexedApache-2.0★ 3
Write a review

Install

Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.

npx agentmarket install skill/yu-iskw-security-audit

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

We use your email only for this newsletter. Privacy

About

Perform a security audit of the codebase. Checks for OWASP Top 10, AI-specific vulnerabilities, dependency issues, and configuration problems.

Use cases: security

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.

Tools
No tools found
Secrets
None asked for
Install scripts
None found

Network hosts it talks to 1

  • codeload.github.com · found in install command

Files it touches

  • ~/.claude/skills/security-audit

Tools it pre-approves 6

From allowed-tools in SKILL.md: the agent may use these without asking you each time.

  • Bash(pnpm
  • audit*),
  • Bash(grep
  • *),
  • Bash(git
  • *)

What's inside

Skill name
security-audit
Description
Perform a security audit of the codebase. Checks for OWASP Top 10, AI-specific vulnerabilities, dependency issues, and configuration problems.
License
Apache-2.0
Allowed tools
Bash(pnpm, audit*),, Bash(grep, *),, Bash(git, *)
Instructions
48 lines in SKILL.md · view on GitHub

Before installing

  • Pre-approves some shell commands

Files (1)

  • SKILL.md

SKILL.md (first lines)

# Security Audit

Perform a security audit with the following scope:

$ARGUMENTS

## Audit Methodology

### 1. Dependency Security

Check for known vulnerabilities in dependencies using the package manager's audit command.

### 2. Source Code Analysis

Scan for common vulnerability patterns:

- Hardcoded secrets (API keys, passwords, tokens)
- Command injection via string interpolation in shell/exec calls
- XSS vectors in templates
- Prompt injection in AI agent inputs
- Insecure deserialization
- Information disclosure in error messages

### 3. AI Agent Security

Review AI agent patterns and verify:

- Input sanitization is applied before LLM processing
- Output sanitization prevents data leakage
- Tool calls are validated and scoped
- Prompt injection defenses are in place

### 4. Configuration Security

- No secrets in version control
- Proper .gitignore coverage
- CORS configuration
- Environment variable handling

## Output

Produce a security report with findings classified by severity:

- 🔴 Critical / 🟠 High / 🟡 Medium / 🔵 Low

Each finding includes: location, vulnerability, impact, and remediation steps.

From yu-iskw/software-development-team-plugin, Apache-2.0.

More from yu-iskw/software-development-team-plugin

Signals

Stars
3
Forks
1
Open issues
2
Last commit (this folder)
Feb 7, 2026 (8 months ago)

From GitHub (fetched Oct 24, 2026).

Details

License
Apache-2.0
Repository
github.com/yu-iskw/software-development-team-plugin
First seen
Oct 24, 2026
Last checked
Oct 24, 2026
Source
GitHubgithub-graphql

More from yu-iskw

Cite this page

security-audit skill. Agent Mart. https://agentmart.dev/skills/yu-iskw-security-audit (last updated 2026-10-24)