Security Auditor

Name: Security Auditor
Author: 00200200

ASecurity

Audit source code for vulnerabilities and dangerous API usage

36 stars
0 votes
0 copies
1 view
Added September 23, 2026

ai-agentsgoshellsqlapidatabasesecurity

Works with

Security analysis

A100/100

Scanned September 23, 2026

npx -y skills add 00200200/cinch --skill security-auditor --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Security Auditor?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Security Auditor

[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/00200200-security-auditor/badge)](https://www.skillsdirectory.com/skills/00200200-security-auditor)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro

SKILL.md

---
name: security-auditor
description: Audit source code for vulnerabilities and dangerous API usage
paths:
  - "**/*.py"
  - "**/*.js"
  - "**/*.ts"
  - "**/*.go"
---

# Security Auditor

Audit proposed code changes against the OWASP Top 10 guidelines:

1. **Injection:** Ensure all database queries use parameterized SQL; avoid shell string interpolation (`eval`, `exec`, `os.system`).
2. **Access Control:** Verify IDOR protection on tenant-scoped model lookups.
3. **Secrets:** Flag hardcoded API keys, bearer tokens, and credentials.
4. **Dependencies:** Validate that external package imports are recognized and pinned.