injection-xss-csrf-audit - Audit injection, XSS, CSRF, and security headers
Audits supplied code and configuration for injection, XSS, CSRF, validation, and security-header weaknesses, then proposes concrete fixes and tests.
Tags
Updated: 2026-10-16Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Audit injection paths
- Trace source-to-sink flows
- Review contextual XSS escaping
- Check CSRF protections
- Verify backend validation
- Inspect security headers
- Prioritize security findings
- Propose fixes and tests
Inputs
- Code under review
- Configuration under review
- Technology stack context
- Architecture and trust boundaries
Outputs
- Prioritized vulnerability findings
- Evidence and impact explanations
- Concrete secure code fixes
- Recommended security tests
- Assumption and confidence statements
Requirements
- Authorized defensive use