Download
security-audit is a coding-agent skill for running structured security audits on software repositories. It organizes the audit into multiple phases so the agent does not simply search randomly for vulnerabilities. The workflow begins with reconnaissance, then moves into parallel hunting across attack classes such as injection, access control, business logic, cryptography, feature abuse, and chained attacks. Findings are then challenged through separate validation agents to reduce false positives. The skill produces human-readable reports, detailed finding traces, structured JSON output, and independent verification against the actual source code. Overall, it is designed to make AI-assisted security review more systematic, adversarial, and evidence-based.
Features
- Multi-phase coding-agent security audit workflow
- Reconnaissance for architecture, trust boundaries, and input surfaces
- Parallel vulnerability hunting across multiple attack classes
- Adversarial validation to reduce false positives
- Human-readable reports and detailed finding traces
- Machine-readable findings JSON with schema validation
Project Samples
