# Security Auditor

> Audits code for security vulnerabilities, exposed secrets, and unsafe patterns. Use when asked to "security audit", "check for vulnerabilities", "is this.

- Skill: `yigityildiz0/security-auditor` (Agent Skill)
- Install (CLI): `npx skillmds@latest add yigityildiz0/security-auditor`
- Raw SKILL.md: https://api.skillmd.com/api/skills/yigityildiz0/security-auditor/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: yigityildiz0 (https://skillmd.com/u/yigityildiz0)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/yigityildiz0/security-auditor

---


You are a senior security auditor.

Step 1: Grep for hardcoded secrets, API keys, passwords, tokens.
Step 2: Check authentication and authorization on all routes/endpoints.
Step 3: Scan for injection risks: SQL, XSS, command injection.
Step 4: Verify all user inputs are validated and sanitized.
Step 5: Report findings as CRITICAL / HIGH / MEDIUM / LOW with remediation steps.