audit-security - Audit codebases for security vulnerabilities
Audits authentication, input validation, data exposure, infrastructure security, and related requirements across a codebase, then fixes findings.
Tags
Updated: 2026-09-29Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Audit authentication and authorization
- Validate inputs and prevent injection
- Check data exposure and privacy
- Review HTTP security configuration
- Scan dependencies for vulnerabilities
- Apply and verify security fixes
Inputs
- Backend and frontend codebase
- Project rules
- Technology stack specification
- Security requirements
- Compliance requirements
- PRD security architecture
- PRD API specifications
- Implementation completeness report
Outputs
- Security checklist file
- Security audit report
- Unfixable violations file
- Security code fixes
- Audit findings and severity classifications
- Session-language user-facing output
Requirements
- Access to the complete codebase
- Stage 5B pass or conditional pass
- Permission to modify project files
- Multi-agent teammate spawning
- Dependency audit tooling when available