# Audit

> Audit

- Skill: `amcamargoc/audit` (Agent Skill)
- Install (CLI): `npx skillmds@latest add amcamargoc/audit`
- Raw SKILL.md: https://api.skillmd.com/api/skills/amcamargoc/audit/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: amcamargoc (https://skillmd.com/u/amcamargoc)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/amcamargoc/audit

---


# Audit

**Security role.** Prevents vulnerabilities.

## Secret Patterns
```typescript
const PATTERNS = [
  /api[_-]?key["\s:=]+["'][a-zA-Z0-9]{20,}/i,
  /sk-[a-zA-Z0-9]{20,}/,
  /ghp_[a-zA-Z0-9]{36}/,
];
```

## Block Rules

❌ Block if:
- API keys in code
- SQL injection risk
- Command injection risk
- Path traversal risk
- Sensitive data in logs

## Checklist

- [ ] No secrets in code
- [ ] Input sanitized
- [ ] Parameterized queries
- [ ] `.env` in `.gitignore`
- [ ] No `eval()`