本文へ移動
cccskills
無料GitHub で公開

security-audit

Deep security audit covering OWASP Top 10, authentication, authorization, data protection, dependency vulnerabilities, and secrets scanning. Delegates to the Centinela (QA) agent.

インストール方法を見る

含まれるファイル(1)

  • SKILL.md1.7 KB

SKILL.md(原文)

インストールする前に、エージェントに与えられる指示の中身を確認できます。

Security Audit

Performs a deep security audit using the Centinela (QA) agent.

When to Use This Skill

  • Before a release to verify security posture
  • After significant code changes that touch authentication, authorization, or data handling
  • Periodic security review of the codebase
  • When adding new dependencies or external integrations

What This Skill Does

  1. Runs the SIGN IN checklist
  2. Performs OWASP Top 10 systematic check (A01-A10)
  3. Scans for hardcoded secrets, API keys, tokens, and connection strings
  4. Audits dependencies for known CVEs
  5. Checks smart contracts if Solidity is present (reentrancy, overflow, access control)
  6. Runs Security Verification and Quality Verification checklists (TIME OUT)
  7. Issues verdict and writes report to docs/reviews/security-audit-{date}.md
  8. Prepares findings handoff to Dev agent

How to Use

Basic Usage

/security-audit

Scoped Audit

/security-audit src/auth/ src/api/

Example

User: /security-audit src/payments/

Output: A security audit report at docs/reviews/security-audit-2026-02-23.md with:

  • OWASP Top 10 findings organized by severity
  • Secrets scan results
  • Dependency vulnerability report
  • Verdict: APPROVED or CHANGES REQUIRED
  • Fix order recommendation for the Dev agent

Tips

  • If no scope is specified, the entire src/ directory is audited
  • Critical findings trigger the Non-Normal emergency checklist
  • The agent will never attempt to fix vulnerabilities — only document them

レビュー

まだレビューはありません。使ってみた感想をお寄せください。

同じリポジトリのスキル

概要と使いどころ

Automate ActiveCampaign tasks via Rube MCP (Composio): manage contacts, tags, list subscriptions, automation enrollment, and tasks. Always search tools first for current schemas.

日本語の概要は準備中です。原文の説明を表示しています。

davepoon/buildwithclaude3,6192026年10月10日 更新

Analytics your AI agent can actually use. Track, analyze, run A/B experiments, and optimize across all your projects via CLI. Includes a growth playbook so your agent knows HOW to grow, not just what to track.

日本語の概要は準備中です。原文の説明を表示しています。

davepoon/buildwithclaude3,6192026年10月10日 更新

Teaches when to recall from long-term memory before acting and when to save durable decisions, corrections and failures afterwards. Use when a memory tool or MCP memory server is connected but the agent is not using it consistently, when the user complains that the assistant forgets preferences, conventions or past decisions between sessions, or when setting up persistent memory for a project. Works with any memory backend: a folder of Markdown files, a local MCP server, or a managed service.

日本語の概要は準備中です。原文の説明を表示しています。

davepoon/buildwithclaude3,6192026年10月10日 更新

Audit local AI coding-agent sessions with agenttrace for cost, tokens, tool failures, latency, anomalies, health, diffs, and CI gates.

日本語の概要は準備中です。原文の説明を表示しています。

davepoon/buildwithclaude3,6192026年10月10日 更新

Audit whether a website can be found, crawled, and cited by AI answer engines such as ChatGPT Search, Perplexity, Google AI Overviews, and Microsoft Copilot. Use when someone asks why their brand is missing from AI answers, whether AI crawlers can read their site, how to get cited by ChatGPT or Perplexity, or asks for a GEO or AEO (generative / answer engine optimization) review. Produces a citation baseline across buyer-intent prompts, a crawler-access check, a citability review of named pages, and a ranked fix list. Not for keyword rank tracking, paid search, or pages behind a login.

日本語の概要は準備中です。原文の説明を表示しています。

davepoon/buildwithclaude3,6192026年10月10日 更新

Automate Airtable tasks via Rube MCP (Composio): records, bases, tables, fields, views. Always search tools first for current schemas.

日本語の概要は準備中です。原文の説明を表示しています。

davepoon/buildwithclaude3,6192026年10月10日 更新

davepoon のスキルをすべて見る

このスキルの問題を報告する