# Security Audit

> Run a full security audit: OWASP Top 10, secrets detection, input validation, auth, dependency vulnerabilities.

- Skill: `iabhisekbosepm/security-audit` (Agent Skill)
- Install (CLI): `npx skillmds@latest add iabhisekbosepm/security-audit`
- Raw SKILL.md: https://api.skillmd.com/api/skills/iabhisekbosepm/security-audit/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: iabhisekbosepm (https://skillmd.com/u/iabhisekbosepm)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/iabhisekbosepm/security-audit

---


# /security-audit — Security Scan

Audit: `$ARGUMENTS` (or full project if none). See `agents/security-reviewer.md` and `patterns/security-rules.md`.

1. **Dependency scan** — `npm audit --audit-level=high`
2. **Secrets scan** — Grep for `sk-`, `api_key`, `password`, `secret`, `token`, `Bearer`. Check `.gitignore`.
3. **OWASP Top 10** — Injection, auth, XSS, access control, misconfiguration, deserialization, logging
4. **Code patterns** — Flag critical patterns from security-reviewer agent
5. **Report** — CRITICAL/HIGH/MEDIUM counts + PASS/FAIL verdict