Individual skill
code-audit-finding
DeepAudit Finding overlay for source-code auditing with code-audit-main references, mandatory reading routes, and progressive WooYun disclosure.
skill_library/code-audit-finding/SKILL.md
Source commit b26025f27199ba2d93145e4a08fc9015e8d846e4
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- Yes
- Repository scan complete
- No
- Skill scan complete
- Yes
- Observed behavior
- Network or broad shell
- Last checked
- Nov 10, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 1,223
- Repository last updated
- Oct 1, 2026
- License
- AGPL-3.0
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- agent Repository topic
- ai-security Repository topic
- code-audit Repository topic
- cve Repository topic
- fastapi Repository topic
- llm-agent Repository topic
- multi-agent Repository topic
- penetration-testing Repository topic
- react Repository topic
- security-audit Repository topic
- finding Declared skill tag
- code-audit Declared skill tag
- source-audit Declared skill tag
- auth Declared skill tag
- idor Declared skill tag
- business-logic Declared skill tag
- security Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
README.mddoc · 7,685 bytesREADME_CN.mddoc · 7,221 bytesSKILL.mdcore · 3,611 bytesagent.mddoc · 88,288 bytesbindings.jsonasset · 1,317 bytesimage/wechat.pngasset · 529,808 bytesmetadata.jsonasset · 17,018 bytesreferences/adapters/go.yamlasset · 9,085 bytesreferences/adapters/java.yamlasset · 9,906 bytesreferences/adapters/javascript.yamlasset · 10,632 bytesreferences/adapters/php.yamlasset · 11,149 bytesreferences/adapters/python.yamlasset · 10,950 bytesreferences/cases/real_world_vulns.mddoc · 11,181 bytesreferences/checklists/c_cpp.mddoc · 10,096 bytesreferences/checklists/coverage_matrix.mddoc · 3,103 bytesreferences/checklists/dotnet.mddoc · 11,607 bytesreferences/checklists/go.mddoc · 9,528 bytesreferences/checklists/java.mddoc · 11,023 bytesreferences/checklists/javascript.mddoc · 9,957 bytesreferences/checklists/php.mddoc · 10,421 bytesreferences/checklists/python.mddoc · 10,170 bytesreferences/checklists/ruby.mddoc · 11,422 bytesreferences/checklists/rust.mddoc · 9,453 bytesreferences/checklists/universal.mddoc · 1,922 bytesreferences/core/anti_hallucination.mddoc · 4,682 bytesreferences/core/attack_path_priority.mddoc · 10,662 bytesreferences/core/audit.shruns · 3,410 bytesreferences/core/benchmark_methodology.mddoc · 4,185 bytesreferences/core/bypass_strategies.mddoc · 11,916 bytesreferences/core/capability_baseline.mddoc · 29,562 bytesreferences/core/comprehensive_audit_methodology.mddoc · 22,373 bytesreferences/core/data_flow_methodology.mddoc · 15,499 bytesreferences/core/docker_verification.mddoc · 70,919 bytesreferences/core/dynamic_code_audit.mddoc · 17,634 bytesreferences/core/external_tools_guide.mddoc · 20,223 bytesreferences/core/false_positive_filter.mddoc · 8,713 bytesreferences/core/original_skill_reference.mddoc · 12,774 bytesreferences/core/phase2_deep_methodology.mddoc · 7,892 bytesreferences/core/poc_generation.mddoc · 19,395 bytesreferences/core/security_controls_engine.pyruns · 21,688 bytesreferences/core/security_controls_matrix.yamlasset · 16,895 bytesreferences/core/security_controls_methodology.mddoc · 13,171 bytesreferences/core/security_indicators.mddoc · 13,874 bytesreferences/core/semantic_search_guide.mddoc · 15,086 bytesreferences/core/sensitive_operations_matrix.mddoc · 12,955 bytesreferences/core/sinks_sources.mddoc · 34,347 bytesreferences/core/systematic_reflection.mddoc · 5,927 bytesreferences/core/taint_analysis.mddoc · 37,051 bytesreferences/core/verification_methodology.mddoc · 23,761 bytesreferences/core/version_boundaries.mddoc · 10,222 bytesreferences/frameworks/django.mddoc · 10,792 bytesreferences/frameworks/dotnet.mddoc · 10,267 bytesreferences/frameworks/express.mddoc · 6,163 bytesreferences/frameworks/fastapi.mddoc · 4,524 bytesreferences/frameworks/flask.mddoc · 12,026 bytesreferences/frameworks/gin.mddoc · 11,307 bytesreferences/frameworks/java_web_framework.mddoc · 6,886 bytesreferences/frameworks/koa.mddoc · 18,889 bytesreferences/frameworks/laravel.mddoc · 19,455 bytesreferences/frameworks/mybatis_security.mddoc · 13,640 bytesreferences/frameworks/nest_fastify.mddoc · 12,807 bytesreferences/frameworks/rails.mddoc · 9,800 bytesreferences/frameworks/rust_web.mddoc · 10,966 bytesreferences/frameworks/spring.mddoc · 21,511 bytesreferences/languages/c_cpp.mddoc · 17,282 bytesreferences/languages/dotnet.mddoc · 31,888 bytesreferences/languages/go.mddoc · 30,461 bytesreferences/languages/go_security.mddoc · 13,276 bytesreferences/languages/java.mddoc · 41,805 bytesreferences/languages/java_deserialization.mddoc · 3,808 bytesreferences/languages/java_fastjson.mddoc · 3,321 bytesreferences/languages/java_gadget_chains.mddoc · 27,543 bytesreferences/languages/java_jndi_injection.mddoc · 16,576 bytesreferences/languages/java_practical.mddoc · 38,279 bytesreferences/languages/java_script_engines.mddoc · 17,827 bytesreferences/languages/java_xxe.mddoc · 10,750 bytesreferences/languages/javascript.mddoc · 36,877 bytesreferences/languages/php.mddoc · 55,396 bytesreferences/languages/php_deserialization.mddoc · 10,863 bytesreferences/languages/python.mddoc · 59,042 bytesreferences/languages/python_deserialization.mddoc · 10,400 bytesreferences/languages/ruby.mddoc · 30,517 bytesreferences/languages/rust.mddoc · 18,067 bytesreferences/reporting/attacker_perspective.mddoc · 14,365 bytesreferences/security/api_gateway_proxy.mddoc · 4,572 bytesreferences/security/api_security.mddoc · 14,415 bytesreferences/security/authentication_authorization.mddoc · 16,477 bytesreferences/security/business_logic.mddoc · 29,699 bytesreferences/security/cache_host_header.mddoc · 3,972 bytesreferences/security/cross_service_trust.mddoc · 5,354 bytesreferences/security/cryptography.mddoc · 11,601 bytesreferences/security/dependencies.mddoc · 12,336 bytesreferences/security/file_operations.mddoc · 20,728 bytesreferences/security/frontend_frameworks.mddoc · 15,120 bytesreferences/security/graphql.mddoc · 6,612 bytesreferences/security/http_smuggling.mddoc · 1,595 bytesreferences/security/infra_supply_chain.mddoc · 4,275 bytesreferences/security/input_validation.mddoc · 14,746 bytesreferences/security/llm_security.mddoc · 13,909 bytesreferences/security/logging_security.mddoc · 14,677 bytesreferences/security/memory_native.mddoc · 4,962 bytesreferences/security/message_queue_async.mddoc · 5,764 bytesreferences/security/mobile_security.mddoc · 24,953 bytesreferences/security/oauth_oidc_saml.mddoc · 5,217 bytesreferences/security/race_conditions.mddoc · 17,262 bytesreferences/security/realtime_protocols.mddoc · 4,887 bytesreferences/security/scheduled_tasks.mddoc · 7,270 bytesreferences/security/serverless.mddoc · 10,711 bytesreferences/wooyun/INDEX.mddoc · 6,979 bytesreferences/wooyun/command-execution.mddoc · 44,897 bytesreferences/wooyun/file-traversal.mddoc · 28,598 bytesreferences/wooyun/file-upload.mddoc · 84,644 bytesreferences/wooyun/info-disclosure.mddoc · 24,443 bytesreferences/wooyun/logic-flaws.mddoc · 18,194 bytesreferences/wooyun/sql-injection.mddoc · 56,104 bytesreferences/wooyun/unauthorized-access.mddoc · 24,617 bytesreferences/wooyun/xss.mddoc · 18,611 bytes
No licensed excerpt is available. You can inspect the pinned source.