security-auditor

Detect OWASP Top 10 vulnerabilities and exposed secrets in codebases.

Updated Mar 29, 2026
One-click install
npx skills add https://github.com/Mateo1099/CampusFlow --skill security-auditor-mateo1099
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-auditor
Source: https://github.com/Mateo1099/CampusFlow/tree/main/.trae/skills/security-auditor
Command: npx skills add https://github.com/Mateo1099/CampusFlow --skill security-auditor-mateo1099

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Continuous security vulnerability scanning across codebases, enabling proactive defense before deployment.

Core Features & Use Cases

  • OWASP Top 10 pattern detection (SQLi, XSS, broken auth, misconfigurations, data exposure)
  • Integration with secret-scanner and /review workflows
  • Real-time alerts and actionable remediation guidance

Quick Start

Run a security audit on modified files to identify OWASP Top 10 issues and exposed secrets before deployment.

Frequently Asked Questions about security-auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for OWASP Top 10 vulnerabilities before deployment?▼

Automated vulnerability scanning detects OWASP Top 10 patterns like SQL injection, XSS, broken authentication, and data exposure by auditing file changes during code review or pre-deployment checks, providing actionable remediation guidance.

How do I detect exposed secrets in my code review workflow?▼

Detect exposed secrets during code review by integrating this security audit with secret-scanner workflows, scanning file changes to identify hardcoded credentials and generate real-time alerts with remediation steps.

Can I use automated vulnerability scanning for pre-deployment checks on modified files?▼

Yes, you can apply automated vulnerability scanning to modified files for pre-deployment checks, verifying the inclusion of automated checks for SQL injection, XSS, and authentication weaknesses before release.

Does automated security auditing work with standard code review workflows?▼

Automated security auditing integrates directly with code review workflows, applying continuous vulnerability scanning to file-change audits to catch OWASP Top 10 issues and secrets exposure early in development.

What is the best way to catch SQL injection and XSS issues during development?▼

The best way to catch SQL injection and XSS issues is continuous security vulnerability scanning that detects OWASP Top 10 patterns across codebases, enabling proactive defense with real-time alerts before deployment.