security-auditor

Automatic detection of OWASP Top 10 vulnerabilities and insecure code patterns across your codebase. Automatic security vulnerability detection. 1. SQL Injection 2. XSS (Cross-Site Scripting) 3. Authentication Issues 4. Sensitive Data Exposure 5. Broken Access Control I can run security audits on dependencies: Me (Skill): Quick vulnerability pattern detection @code-reviewer (Sub-Agent): Deep security audit with threat modeling Works without sandboxing: ✅ Yes Works with sandboxing: ✅ Yes Optional: For dependency scanning Add company-specific security patterns: - Scans for SQL injection, XSS, hardcoded secrets, weak authentication, broken access control, and insecure deserialization with severity-based alerts - Activates automatically on code file changes, dependency updates, configuration modifications, and before deployments - Provides specific remediation guidance with code examples and references to OWASP and CWE standards - Integrates with dependency auditing tools (npm audit, pip-audit) and pairs with the @code-reviewer sub-agent for deeper threat modeling - ✅ Code files modified (especially auth, API, database) - ✅ User mentions security or vulnerabilities - ✅ Before deployments or commits - ✅ Dependency changes - ✅ Configuration file changes - Insecure Deserialization - Security Misconfiguration - Insufficient Logging - CSRF Protection Missing - CORS Misconfiguration -...