Individual skill
security-audit
Run a broad, evidence-backed security posture review of a local repository, a user-supplied website, or both. Use for security audits, security reviews, release security gates, or when the correct focused security skill is unclear; it coordinates applicable read-only checks and produces one deduplicated report.
skills/security-audit/SKILL.md
Source commit e17f9081b1b1746a837bb188f6ef3245d720fc4b
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- No
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Not checked yet
- Last checked
- Nov 4, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 13
- Repository last updated
- Nov 1, 2026
- License
- Apache-2.0
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- accessibility Repository topic
- claude-code Repository topic
- code-review Repository topic
- core-web-vitals Repository topic
- playwright Repository topic
- privacy Repository topic
- qa Repository topic
- quality-assurance Repository topic
- security Repository topic
- seo Repository topic
- security Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Read excerpt
# Security Audit
Coordinate the repository's focused security skills into one read-only review. Select only checks that apply to the target, preserve the evidence and limitations of each check, and never treat a risky setting as proof of a vulnerability or compromise.
## Prerequisites
- A local repository, a user-supplied URL, or both.
- Browser automation such as Playwright MCP only when the selected profile includes a website.
- Companion skills improve coverage when installed, but this skill must report missing checks rather than pretending they ran.
## Trigger
- "Run a security audit"
- "Review this repository for security risks"