Skills tagged: code-audit

• referee2 - Systematic Audit and Replication Protocol

  code-auditreplicationlatex-revieweconometrics

  ★ 17 · Updated 2026-09-21

  Audits slides for rhetoric and visual quality, and performs cross-language replication and econometric audits for empirical code.

  ⚙ Review slide presentation deck⚙ Verify TikZ graphics visual spacing⚙ Audit LaTeX log file cleanliness
• tech-due-diligence - Technical Due Diligence

  due-diligencecode-auditrisk-assessmentarchitecture

  ★ 0 · Updated 2026-09-20

  Evaluates codebase risk and remediation effort for transactions, delivering clear recommendations for non-technical decision-makers.

  ⚙ Assess architecture and scalability ceiling⚙ Evaluate security and data privacy risks⚙ Audit open source licensing obligations
• swe-team:security-review - OWASP Top 10 and secret detection review for PR diffs.

  security-reviewowasp-top-10secret-detectioncode-audit

  ★ 0 · Updated 2026-09-19

  Performs OWASP Top 10 pattern checks and secret detection on a PR diff to produce a security verdict and report.

  ⚙ Load full PR git diff⚙ Scan for hardcoded secrets⚙ Check OWASP Top 10 patterns
• probekit-project-hygiene - Project hygiene audit for codebases

  project-hygienecode-auditdead-codegit

  ★ 0 · Updated 2026-09-18

  Audits git-tracked files to detect project waste and generate justified cleanup plans.

  ⚙ Detect dead non-source files⚙ Find unused code exports⚙ Identify duplicate files
• golang-error-handling - Idiomatic Go Error Handling and Logging Best Practices

  goerror-handlingsloglogging

  ★ 0 · Updated 2026-09-18

  Idiomatic Go error handling and structured logging guidelines, covering error wrapping, inspection, audit modes, slog integration, and production practices.

  ⚙ Write idiomatic Go error handling⚙ Audit error handling practices⚙ Review error handling code changes
• vibe-security - Audit codebases for common security vulnerabilities.

  securitycode-auditvulnerability-scanauthentication

  ★ 0 · Updated 2026-09-18

  Audits codebases for security vulnerabilities introduced in vibe-coded applications, covering secrets, auth, access control, and payment flows.

  ⚙ Scan exposed secrets and environment variables⚙ Audit database access control policies⚙ Validate authentication and session management
• finding-duplicate-functions - Finding duplicate-intent functions in codebases

  code-auditduplicate-detectionrefactoringsemantic-analysis

  ★ 0 · Updated 2026-09-17

  Audits codebases for semantic duplicates that perform the same function but have different names or implementations.

  ⚙ Extract function catalog⚙ Categorize functions by domain⚙ Split catalog into category files
• security-review - Analyze code diffs for security vulnerabilities

  devexsecurityreviewvulnerability-scan

  ★ 0 · Updated 2026-09-17

  Analyze a diff or changed files for common security vulnerabilities including injection, XSS, SSRF, and secret leaks.

  ⚙ Detect repository technology stack⚙ Obtain code diffs⚙ Scan code for vulnerabilities
• app-store-review-precheck - App Store Pre-submission & iOS Code Review Audit

  iosapp-storeapp-reviewprecheck

  ★ 0 · Updated 2026-09-16

  Scans iOS code and configurations against Apple App Review Guidelines to output structured pre-check reports with pass, pending, and blocker items.

  ⚙ Scan usage description strings⚙ Verify auto-renewable subscription UI⚙ Inspect in-app purchase flow
• vuln-research - Vulnerability Research and Security Audit Methodology

  vulnerability-researchsecurity-auditcode-auditpenetration-testing

  ★ 186 · Updated 2026-09-16

  Provides a methodology framework derived from security docs for vulnerability research, code audit, and attack chain planning.

  ⚙ Analyze vulnerability attack paths⚙ Identify system attack surfaces⚙ Construct hypotheses and exploit payloads
• variant-analysis - Find similar vulnerabilities across codebases using patterns

  variant-analysissecuritycode-auditcodeql

  ★ 0 · Updated 2026-09-16

  Finds similar vulnerabilities and bugs across codebases using pattern-based analysis.

  ⚙ Search for similar vulnerability instances⚙ Build CodeQL and Semgrep queries⚙ Perform systematic code audits
• design-review - Run multi-persona presentation review for the site

  design-reviewui-testingaccessibilitycode-audit

  ★ 0 · Updated 2026-09-15

  Runs a multi-persona presentation review including evidence capture, parallel critics, HTML report, calibration gate, and optional fixes.

  ⚙ Capture site presentation evidence⚙ Generate computed facts sheet⚙ Execute parallel critic subagents
• /zombie - Find and report unreferenced code in codebases

  dead-codecode-auditrefactoringcodebase-cleanup

  ★ 0 · Updated 2026-09-15

  Scans codebases to detect unreferenced models, unused methods, unreferenced constants, obsolete migrations, and dead feature code.

  ⚙ Scan codebases for unused code⚙ Identify unreferenced models and methods⚙ Verify database migrations and crons
• mobile-security-expert - Mobile security vulnerability mining knowledge base

  mobile-securityandroidiosvulnerability-mining

  ★ 204 · Updated 2026-09-15

  Provides guidance, technical details, code pattern analysis, and tool usage for Android and iOS vulnerability mining based on HackerOne public reports.

  ⚙ Guide Android vulnerability mining⚙ Guide iOS vulnerability mining⚙ Query and analyze vulnerability cases
• skill-security-scanner - AI Agent Skills Security Scanner

  securityscannermalware-detectioncode-audit

  ★ 20 · Updated 2026-09-13

  Scan AI agent skills for malicious code, security vulnerabilities, and risk patterns using CVSS 3.1 scoring.

  ⚙ Scan skills for security risks⚙ Assess vulnerabilities using CVSS scoring⚙ Detect threats using IOC intelligence
• repo-scan - Cross-stack source code asset audit tool

  repo-scancode-auditdependency-detectionstatic-analysis

  ★ 3 · Updated 2026-09-12

  Classifies source files, detects embedded third-party libraries, provides four-level module decisions, and generates an interactive HTML report.

  ⚙ Scan cross-stack source code⚙ Classify repository files⚙ Detect embedded third-party libraries
• analyzer-audit - Comprehensive read-only audit for code and databases

  code-auditstatic-analysisdatabasebackend

  ★ 2 · Updated 2026-09-10

  Performs a read-only audit covering bugs, TypeScript types, database schemas, and backend architecture across frontend and backend codebase.

  ⚙ Audit frontend backend and DB⚙ Inspect Postgres and MongoDB schemas⚙ Check type errors and Zod sync
• repo-audit-and-cleaning - Repository-wide technical audit and cleaning analysis

  code-auditarchitecturedead-codecode-cleaning

  ★ 1 · Updated 2026-09-09

  Conducts a complete repository-wide technical audit covering architecture, dead code, performance, coupling, and tests without modifying code.

  ⚙ Read master prompt file⚙ Audit repository architecture and performance⚙ Identify dead and orphaned code
• signum - Signum - Evidence-Driven Development Pipeline

  contract-first-developmentpipelinecode-auditverification

  ★ 18 · Updated 2026-09-09

  Runs a contract-first development pipeline to define correctness, implement code, perform audits, and package proof artifacts.

  ⚙ Define verifiable contract⚙ Implement against defined contract⚙ Audit code with deterministic checks
• brakeman - Brakeman Security Scanner for Ruby on Rails

  securitystatic-analysisruby-on-railsvulnerability-scanning

  ★ 602 · Updated 2026-06-30

  Static analysis security vulnerability scanner for Ruby on Rails applications that detects SQL injection, XSS, command injection, and other vulnerability types.

  ⚙ Scan Rails application for vulnerabilities⚙ Generate security reports in multiple formats⚙ Filter warnings by confidence level

Scroll to load more