security-audit

Audit code changes for security vulnerabilities with OWASP Top 10 checks.

Updated Apr 1, 2026
One-click install
npx skills add https://github.com/hpsgd/claude-marketplace --skill security-audit-hpsgd
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/hpsgd/claude-marketplace/tree/main/plugins/practices/security-compliance/skills/security-audit
Command: npx skills add https://github.com/hpsgd/claude-marketplace --skill security-audit-hpsgd

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps developers identify and remediate security vulnerabilities in code changes or targeted code areas before deployment.

Core Features & Use Cases

  • Scope-aware security auditing across designated files, directories, or git diffs.
  • Systematic data-flow mapping and OWASP Top 10 coverage to guide remediation.
  • Formal findings reports with actionable recommendations and evidence.

Quick Start

Provide the path to the target code and run a security audit to generate a findings report.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security audit on a git diff before deployment?▼

To perform a security audit on a git diff, provide the diff path to scope the analysis. The audit applies OWASP Top 10 checks and data-flow mapping to generate a formal findings report with actionable remediation evidence.

What is the best way to check code changes for OWASP Top 10 vulnerabilities?▼

Checking code changes for OWASP Top 10 vulnerabilities requires a systematic security audit of targeted files or directories. This process maps data flows and enforces structured checks to identify critical flaws in auth, data access, and API boundaries.

Can I run a vulnerability analysis on specific directories instead of the entire codebase?▼

Yes, you can run vulnerability analysis on specific directories instead of the entire codebase. The security audit is scope-aware, allowing you to target designated files, directories, or git diffs to identify and remediate security flaws early.

How do I map data flows to find business logic security flaws?▼

Mapping data flows to find business logic security flaws is achieved through a structured security audit workflow. This process systematically traces data access and API boundaries, enforcing evidence-based remediation to fix vulnerabilities early.

Does static analysis for secure DevOps cover infrastructure and API boundary vulnerabilities?▼

Static analysis for secure DevOps covers infrastructure and API boundary vulnerabilities by performing a comprehensive security audit. It emphasizes critical vulnerabilities across auth, data access, and business logic to generate formal findings reports.

How do I get an evidence-based remediation report after a code security audit?▼

To get an evidence-based remediation report after a code security audit, run the structured workflow on your targeted code. The process outputs a formal findings report containing actionable recommendations and evidence for identified vulnerabilities.