security-audit - Review codebases and services for security vulnerabilities
Provides defensive security guidance and reviews codebases, APIs, services, CLI tools, libraries, and daemons for vulnerabilities.
Tags
Updated: 2026-10-16security auditvulnerability reviewcode securitypenetration testingsource analysissecure reproduction
Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Review security questions
- Inspect source code
- Identify trust-boundary vulnerabilities
- Reproduce findings safely
- Prioritize confirmed findings
- Recommend effective fixes
- Generate audit reports
Inputs
- Source code
- Repository metadata
- Review scope
- Local tools and dependencies
- Sandbox configuration
- Prior audit records
Outputs
- Security findings
- Source evidence
- Reproduction steps
- Priority assessments
- Fix recommendations
- Audit reports
- Validation blockers
- Coverage records
Requirements
- OS-enforced sandbox
- No external network access
- Read-only target source
- Locally available dependencies
- Resource limits
- Required filesystem permissions