security-audit
Find real security flaws in your source code.
What it does
Identifies source-grounded security vulnerabilities and gives owners evidence, safe reproductions, priorities, and narrowly targeted fixes.
When to use it
Use for security questions, focused vulnerability reviews, research, audits, or penetration tests; run the complete workflow only for explicit audit, comprehensive review, or report requests.
How to use it
Give it a codebase and a security question or audit request; it returns focused guidance or, for an explicit full audit, writes report files outside the target by default.
What you provide
- An existing project
Good to know
- starts helper agents, number unstated
- starts 4 helper agents
- starts one helper agent per item, so the count depends on the work
What you need · 2
Full audits require Node.js to run the bundled findings and coverage validators.
The full-audit validators require operating-system support exposed through O_NOFOLLOW and O_NONBLOCK; the coverage validator rejects all inputs when either protection is unavailable.
Access · 2
This skill
coverage-ledger.json
Reads prior audit coverage
findings.json
Reads prior audit findings