security-audit

Scan code and configurations for security vulnerabilities and governance violations.

157|28|Updated Feb 7, 2026
One-click install
npx skills add https://github.com/Fr-e-d/GAAI-framework --skill security-audit-fr-e-d
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/Fr-e-d/GAAI-framework/tree/main/.gaai/core/skills/cross/security-audit
Command: npx skills add https://github.com/Fr-e-d/GAAI-framework --skill security-audit-fr-e-d

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill proactively identifies security vulnerabilities and governance violations within code, configurations, and deployed environments, ensuring a robust security posture.

Core Features & Use Cases

  • Vulnerability Scanning: Detects common security flaws and secrets exposure in code and configurations.
  • Compliance Validation: Checks adherence to project-specific security rules.
  • Remediation Guidance: Provides actionable steps to fix identified issues.
  • Use Case: After deploying a new feature, run this Skill to ensure no new security risks were introduced and that all security policies are met before going live.

Quick Start

Run a security audit on the current codebase and configuration files.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan code for security vulnerabilities and exposed secrets?▼

To scan code for security vulnerabilities, this Skill analyzes your codebase and configuration files to detect common security flaws and secrets exposure, generating a ranked report with actionable remediation steps.

How do I validate code compliance against project-specific security rules?▼

Validating code compliance requires security rules defined in your contexts/rules/ directory, which this Skill uses to check your deployed environments and configurations against governance policies and produce a compliance status report.

What is the best way to automate governance checks for code implementation?▼

Automating governance checks for code implementation involves enforcing security as a system rule; this Skill runs periodic validations against defined contexts/rules/ to identify violations and rank them by severity.

Do I need predefined security rules to perform a vulnerability audit?▼

Yes, predefined security rules are required to perform a vulnerability audit, as the Skill validates your code and configurations against rules stored in contexts/rules/ to determine compliance status and generate remediation guidance.

When should I run a security audit on my codebase?▼

You should run a security audit after deploying a new feature to ensure no new security risks were introduced, verifying that all security policies are met before going live and maintaining a robust security posture.

What does a security vulnerability report include after scanning configurations?▼

A security vulnerability report includes a ranked list of identified security flaws and governance violations, accompanied by actionable remediation steps to fix the issues and ensure compliance with your defined security rules.