security-auditor

What problem does it solve?

This Skill provides continuous, real-time security vulnerability scanning, automatically detecting common weaknesses like SQL Injection, XSS, and insecure authentication patterns. It helps you catch critical issues early in the development cycle, reducing the risk of security breaches and costly fixes later on.

Core Features & Use Cases

• OWASP Top 10 Coverage: Scans for patterns related to the most critical web application security risks.
• Real-time Alerts: Provides instant feedback on vulnerabilities as you write or modify code, with severity levels and fix suggestions.
• Use Case: You write a database query using string concatenation: const query = 'SELECT * FROM users WHERE id = ' + userId;. The skill immediately flags a CRITICAL SQL injection vulnerability, suggesting a parameterized query as a fix.

Quick Start

The skill activates automatically when code files are modified.

Write some potentially insecure code, e.g., a SQL query:

const userId = req.query.id; const sql = SELECT * FROM users WHERE id = ${userId};

The skill will instantly alert you to any detected vulnerabilities.