Results for “audit-findings”
15 skills
trailofbits Audit Augmentation
Projects external audit findings from SARIF static analysis results and weAudit annotation files onto Trailmark code graphs as annotations and subgraphs, enabling cross-referencing with pre-analysis data like blast radius and taint.
6k · bundle
bankrbot Smart Contract Audit
Audits EVM smart contracts across 19 domains using parallel specialist agents, synthesizes findings, and files GitHub issues.
1.2k · bundle
nagarenegishi Owasp Scan
Scans a single file against the OWASP Top 10:2025, tracks cross-file connections, and maintains a persistent findings record.
0
alirezarezvani Skill Security Auditor
Scan and audit AI agent skills for security risks before installation, producing a PASS/WARN/FAIL verdict with findings and remediation guidance.
20.4k · bundle
More results
tinh2 Owasp
Systematically audits a web application against the OWASP 2021 Top 10, producing severity-rated, file-level findings with fixes for each category.
13
mukul975 Analyzing Linux Audit Logs For Intrusion
Detect intrusion attempts, unauthorized access, and privilege escalation on Linux hosts using the auditd framework with ausearch and aureport utilities.
24.6k · bundle
nimoqup046-collab Find Bugs
Reviews local branch changes for bugs, security vulnerabilities, and code quality issues, using a structured checklist and verification process.
2
trailofbits Agentic Actions Auditor
Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations, detecting attack vectors where attacker-controlled input reaches AI agents in CI/CD pipelines.
6k · bundle
mukul975 Analyzing Persistence Mechanisms In Linux
Detect and analyze Linux persistence mechanisms including crontab entries, systemd service units, LD_PRELOAD hijacking, bashrc modifications, and authorized_keys backdoors using auditd and file integrity monitoring.
24.6k · bundle
mukul975 Performing Service Account Audit
Audit service accounts across enterprise infrastructure to identify orphaned, over-privileged, and non-compliant accounts, covering Active Directory, cloud platforms, databases, and applications.
24.6k · bundle
lucaspmarie-a11y Find Bugs
Reviews local branch changes for bugs, security vulnerabilities, and code quality issues, producing a prioritized report with severity ratings and concrete fixes.
5
zhaoxuya520 Code Audit
Performs authorized source-code security reviews using SAST tools like Semgrep and CodeQL, with manual verification of findings and fix recommendations.
12.8k · bundle
mukul975 Benchmarking Kubernetes With Kube Bench
Run CIS Kubernetes Benchmark checks and remediate findings with kube-bench.
24.6k · bundle
github Threat Model Analyst
Performs STRIDE-A threat model analysis of repositories and systems, producing architecture overviews, DFD diagrams, prioritized findings, and executive assessments. Supports both single analysis and incremental updates with change tracking.
36.2k · bundle
bankrbot Aeon Vuln Scanner
Audits trending open-source repos for exploitable vulnerabilities using Semgrep, TruffleHog, osv-scanner, and Slither, then routes findings to responsible disclosure channels (PVR for code flaws, public PRs for dependency CVEs).
1.2k · bundle