security-audit

Locate private keys, API credentials, and exposure points in repositories and VPS configurations.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/Liquilab/Bottie --skill security-audit-liquilab
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/Liquilab/Bottie/tree/main/.claude/skills/security-audit
Command: npx skills add https://github.com/Liquilab/Bottie --skill security-audit-liquilab

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audits Bottie's security posture to identify leaked private keys, API credentials, and exposed attack surfaces before they can be exploited.

Core Features & Use Cases

  • Credential & Secrets checks: Detect exposed secrets in repos and configs.
  • Attack surface assessment: Map exposure points on VPS and services to reduce risk.
  • Hardening validation & reporting: Verify access controls and generate remediation-ready risk reports.

Quick Start

Run the security audit to identify leaks, surface gaps, and generate a risk report.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my codebase for exposed API credentials and private keys?▼

To audit exposed API credentials and private keys, the workflow scans private repositories, VPS configurations, and deployment workflows to locate leaked secrets and generate a remediation-ready risk report.

What is attack surface mapping for VPS hardening?▼

Attack surface mapping for VPS hardening identifies exposure points across your services and configurations, verifying access controls to reduce security risks before deployment.

How do I validate VPS hardening and access controls before deployment?▼

Validating VPS hardening involves checking access controls and configuration exposure points across deployment workflows to ensure security gaps are closed before going live.

Can I perform threat modeling and credential checks on private repositories?▼

Yes, credential checks and threat modeling can be applied directly to private repositories to discover leaked secrets, map attack surfaces, and receive actionable security recommendations.

What's the best way to generate a risk management report for infrastructure vulnerabilities?▼

Generating an infrastructure risk management report requires mapping the attack surface, validating VPS hardening, and summarizing discovered credential exposures into actionable remediation steps.