# Security Audit

> Security audit of codebase or change

- Skill: `emaraschio/security-audit` (Agent Skill, multi-file: 4 files)
- Install (CLI): `npx skillmds@latest add emaraschio/security-audit`
- Raw SKILL.md: https://api.skillmd.com/api/skills/emaraschio/security-audit/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: emaraschio (https://skillmd.com/u/emaraschio)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/emaraschio/security-audit

---

## Overview

Comprehensive security review to identify and fix vulnerabilities in the
codebase.

## Steps

1. **Dependency audit**
    - Check for known vulnerabilities
    - Update outdated packages
    - Review third-party dependencies
2. **Code security review**
    - Check for common vulnerabilities
    - Review authentication/authorization
    - Audit data handling practices
3. **Infrastructure security**
    - Review environment variables
    - Check access controls
    - Audit network security

## Security Checklist

- [ ] Dependencies updated and secure
- [ ] No hardcoded secrets
- [ ] Input validation implemented
- [ ] Authentication secure
- [ ] Authorization properly configured

## Guardrails

- Triage dependency CVEs by severity and reachability; never ignore a known CVE.
- Redact live secrets in findings and cite only their location; never paste the value.
- Keep the audit read-first: do not commit, merge, push, or run production scripts without explicit consent.