PAL Security Audit
Systematic security audit covering OWASP Top 10, compliance, and threat modeling.
When to Use
- Security vulnerability assessment
- OWASP Top 10 analysis
- Compliance evaluation (SOC2, PCI DSS, HIPAA, GDPR)
- Threat modeling
- Pre-deployment security review
- Dependency vulnerability scanning
Quick Start
result = mcp__pal__secaudit(
step="OWASP Top 10 security audit of authentication system",
step_number=1,
total_steps=2,
next_step_required=True,
findings="Beginning vulnerability scan",
audit_focus="owasp",
threat_level="high",
relevant_files=[
"/app/auth/login.py",
"/app/auth/session.py"
],
confidence="exploring"
)
Audit Focus Areas
| Focus |
Description |
owasp |
OWASP Top 10 vulnerabilities |
compliance |
Regulatory compliance |
infrastructure |
Cloud/server security |
dependencies |
Third-party vulnerabilities |
comprehensive |
All areas |
Threat Levels
| Level |
Description |
low |
Internal tools, low-risk data |
medium |
Customer-facing, business data |
high |
Regulated, sensitive data |
critical |
Financial, healthcare, PII |
Required Parameters
| Parameter |
Type |
Description |
step |
string |
Audit narrative |
step_number |
int |
Current step |
total_steps |
int |
Estimated total |
next_step_required |
bool |
More audit needed? |
findings |
string |
Vulnerabilities found |
Optional Parameters
| Parameter |
Type |
Description |
audit_focus |
enum |
owasp/compliance/infrastructure/dependencies/comprehensive |
threat_level |
enum |
low/medium/high/critical |
security_scope |
string |
Context (web, API, mobile, etc.) |
compliance_requirements |
list |
["SOC2", "PCI DSS", "HIPAA"] |
severity_filter |
enum |
Minimum severity to report |
relevant_files |
list |
Security-relevant files |
issues_found |
list |
Vulnerabilities with severity |
OWASP Top 10 Checklist
- Broken Access Control - Authorization bypasses
- Cryptographic Failures - Weak encryption, exposed secrets
- Injection - SQL, NoSQL, OS command, LDAP
- Insecure Design - Missing security controls
- Security Misconfiguration - Default configs, verbose errors
- Vulnerable Components - Outdated dependencies
- Auth Failures - Weak passwords, session issues
- Data Integrity Failures - Insecure deserialization
- Logging Failures - Missing audit trails
- SSRF - Server-side request forgery
Example: Compliance Audit
mcp__pal__secaudit(
step="SOC2 and HIPAA compliance audit of patient data handling",
step_number=1,
total_steps=3,
next_step_required=True,
findings="Reviewing data encryption, access controls, audit logging",
audit_focus="compliance",
compliance_requirements=["SOC2", "HIPAA"],
threat_level="critical",
security_scope="Healthcare API handling PHI",
relevant_files=[
"/app/api/patients.py",
"/app/models/medical_record.py",
"/config/encryption.py"
],
confidence="exploring"
)
Issue Severity
issues_found=[
{"severity": "critical", "description": "Hardcoded API key in source"},
{"severity": "high", "description": "Missing rate limiting on login"},
{"severity": "medium", "description": "Verbose error messages expose stack"},
{"severity": "low", "description": "Missing security headers"}
]
1---2name: pal-secaudit3description: Comprehensive security audit with OWASP Top 10 analysis, compliance evaluation, and threat modeling using PAL MCP. Use for security reviews, vulnerability assessment, or compliance checks. Triggers on security audit requests, vulnerability scanning, or compliance reviews.4---5
6# PAL Security Audit
7
8Systematic security audit covering OWASP Top 10, compliance, and threat modeling.
9
10## When to Use
11
12- Security vulnerability assessment
13- OWASP Top 10 analysis
14- Compliance evaluation (SOC2, PCI DSS, HIPAA, GDPR)
15- Threat modeling
16- Pre-deployment security review
17- Dependency vulnerability scanning
18
19## Quick Start
20
21```python
22result = mcp__pal__secaudit(
23 step="OWASP Top 10 security audit of authentication system",
24 step_number=1,
25 total_steps=2,
26 next_step_required=True,
27 findings="Beginning vulnerability scan",
28 audit_focus="owasp",
29 threat_level="high",
30 relevant_files=[
31 "/app/auth/login.py",
32 "/app/auth/session.py"
33 ],
34 confidence="exploring"
35)
36```
37
38## Audit Focus Areas
39
40| Focus | Description |
41|-------|-------------|
42| `owasp` | OWASP Top 10 vulnerabilities |
43| `compliance` | Regulatory compliance |
44| `infrastructure` | Cloud/server security |
45| `dependencies` | Third-party vulnerabilities |
46| `comprehensive` | All areas |
47
48## Threat Levels
49
50| Level | Description |
51|-------|-------------|
52| `low` | Internal tools, low-risk data |
53| `medium` | Customer-facing, business data |
54| `high` | Regulated, sensitive data |
55| `critical` | Financial, healthcare, PII |
56
57## Required Parameters
58
59| Parameter | Type | Description |
60|-----------|------|-------------|
61| `step` | string | Audit narrative |
62| `step_number` | int | Current step |
63| `total_steps` | int | Estimated total |
64| `next_step_required` | bool | More audit needed? |
65| `findings` | string | Vulnerabilities found |
66
67## Optional Parameters
68
69| Parameter | Type | Description |
70|-----------|------|-------------|
71| `audit_focus` | enum | owasp/compliance/infrastructure/dependencies/comprehensive |
72| `threat_level` | enum | low/medium/high/critical |
73| `security_scope` | string | Context (web, API, mobile, etc.) |
74| `compliance_requirements` | list | ["SOC2", "PCI DSS", "HIPAA"] |
75| `severity_filter` | enum | Minimum severity to report |
76| `relevant_files` | list | Security-relevant files |
77| `issues_found` | list | Vulnerabilities with severity |
78
79## OWASP Top 10 Checklist
80
811. **Broken Access Control** - Authorization bypasses
822. **Cryptographic Failures** - Weak encryption, exposed secrets
833. **Injection** - SQL, NoSQL, OS command, LDAP
844. **Insecure Design** - Missing security controls
855. **Security Misconfiguration** - Default configs, verbose errors
866. **Vulnerable Components** - Outdated dependencies
877. **Auth Failures** - Weak passwords, session issues
888. **Data Integrity Failures** - Insecure deserialization
899. **Logging Failures** - Missing audit trails
9010. **SSRF** - Server-side request forgery
91
92## Example: Compliance Audit
93
94```python
95mcp__pal__secaudit(
96 step="SOC2 and HIPAA compliance audit of patient data handling",
97 step_number=1,
98 total_steps=3,
99 next_step_required=True,
100 findings="Reviewing data encryption, access controls, audit logging",
101 audit_focus="compliance",
102 compliance_requirements=["SOC2", "HIPAA"],
103 threat_level="critical",
104 security_scope="Healthcare API handling PHI",
105 relevant_files=[
106 "/app/api/patients.py",
107 "/app/models/medical_record.py",
108 "/config/encryption.py"
109 ],
110 confidence="exploring"
111)
112```
113
114## Issue Severity
115
116```python
117issues_found=[
118 {"severity": "critical", "description": "Hardcoded API key in source"},
119 {"severity": "high", "description": "Missing rate limiting on login"},
120 {"severity": "medium", "description": "Verbose error messages expose stack"},
121 {"severity": "low", "description": "Missing security headers"}
122]
123```
majiayu000