# Security Audit

> Procedure for analyzing code or dependencies for vulnerabilities

- Skill: `majiayu000/security-audit-24` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add majiayu000/security-audit-24`
- Raw SKILL.md: https://api.skillmd.com/api/skills/majiayu000/security-audit-24/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: majiayu000 (https://skillmd.com/u/majiayu000)
- Updated: 2026-09-22
- Page: https://skillmd.com/skills/majiayu000/security-audit-24

---


## Procedure

1. Run `npm audit`.
2. Scan for hardcoded secrets using `grep`.
3. Review authentication/authorization logic in changed files.
4. Check for injection risks (SQLi, XSS) in inputs.
5. Report findings to `docs/findings.md` or fix if critical.