# Security Audit

> > Security scanning and vulnerability detection. Use when: authentication, authorization, payment processing, user data. Skip when: read-only operations, internal tooling.

- Skill: `ruvnet/security-audit-2` (Agent Skill)
- Install (CLI): `npx skillmds@latest add ruvnet/security-audit-2`
- Raw SKILL.md: https://api.skillmd.com/api/skills/ruvnet/security-audit-2/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: ruvnet (https://skillmd.com/u/ruvnet)
- Updated: 2026-09-09
- Page: https://skillmd.com/skills/ruvnet/security-audit-2

---



# Security Audit Skill

## Purpose
Security scanning and vulnerability detection.

## When to Trigger
- authentication
- authorization
- payment processing
- user data

## When to Skip
- read-only operations
- internal tooling

## Commands

### Full Security Scan
Run comprehensive security analysis

```bash
npx @claude-flow/cli security scan --depth full
```

### Input Validation Check
Check for input validation issues

```bash
npx @claude-flow/cli security scan --check input-validation
```



## Best Practices
1. Check memory for existing patterns before starting
2. Use hierarchical topology for coordination
3. Store successful patterns after completion
4. Document any new learnings

---

**Source:** [`ruvnet/ruflo`](https://github.com/ruvnet/ruflo) → `v3/@claude-flow/codex/.agents/skills/security-audit/SKILL.md`