security-audit - Rust/WebAssembly Security Auditing
Security auditing for Rust and WebAssembly applications with vulnerability identification and secure code review
Tags
Updated: 2026-03-20Capabilities
Typical Inputs
Typical Outputs
What this skill does
- identify vulnerabilities
- review unsafe code
- validate input handling
- check authentication
- check authorization
- audit FFI boundaries
- review memory management
- validate file paths
- sanitize user data
- verify size limits
- review default settings
- check secret management
- audit logging practices
- verify TLS configuration
- check password hashing
- validate cryptographic usage
- review session tokens
- check token expiration
- audit authorization endpoints
- check direct object references
Inputs
- Rust application code
- WebAssembly applications
- unsafe code blocks
- FFI boundaries
- user input data
- configuration settings
- secret management systems
- cryptographic implementations
- TLS configuration
- authentication mechanisms
- authorization mechanisms
- session tokens
- password hashes
- file paths
- content types
- cryptographic libraries
- custom cryptographic implementations
- random number generation
- cryptographic keys
- sensitive data
Outputs
- security audit reports
- vulnerability findings
- remediation guidance
- code review feedback
- security checklist results
- unsafe code audit results
- FFI security assessment
- input validation results
- configuration audit results
- authentication security findings
- authorization security findings
- cryptography assessment
- data protection findings
- error handling security results
- security tool reports
- dependency vulnerability reports
- static analysis results
- fuzzing test results
- security metrics
- fix verification results
Requirements
- Cargo build environment
- Rust project access
- security audit tools
- OWASP guidelines knowledge
- Rust security best practices knowledge
- code review permissions
- testing infrastructure