# Source Audit

> Multi-language source code security audit. Use when analyzing source code for vulnerabilities. Supports Python, JavaScript, Go, Rust, Java, C/C++.

- Skill: `rysweet/source-audit` (Agent Skill)
- Install (CLI): `npx skillmds@latest add rysweet/source-audit`
- Raw SKILL.md: https://api.skillmd.com/api/skills/rysweet/source-audit/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: rysweet (https://skillmd.com/u/rysweet)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/rysweet/source-audit

---


# Source Code Security Audit

Analyze source code at $ARGUMENTS for security vulnerabilities.

## Steps
1. Ingest the source: `skwaq ingest source $0`
2. Initialize knowledge base: `skwaq kb init`
3. Run pattern analysis: `skwaq analyze --quick`
4. Run AI analysis with full agent pipeline: `skwaq analyze`
5. Review findings: `skwaq viz findings`
6. For each critical finding, explain the vulnerability and how to fix it

Focus on: injection, deserialization, command execution, XSS, SSRF, path traversal, and authentication/authorization issues.