security-audit

Name: security-audit
Author: YangKuoshih

YangKuoshih March 9, 2026

3 copies 0 downloads

Universal security scanning skill for AI agents - finds hardcoded secrets, API keys, and vulnerabilities in any codebase. 44 patterns validated against GitLeaks, OWASP Top 10 mapping, Markdown/SARIF/JSON reports. Works across Claude Code, Cursor, Windsurf, and any agentic platform.

</div>

Why

Every leaked secret starts the same way — a key hardcoded "just for testing" that makes it to production. Existing tools catch some of these, but they're standalone binaries that don't understand your code's context.

security-audit combines deterministic pattern scanning with LLM-powered reasoning. The scanner finds candidates fast. The AI filters false positives, understands context, and writes remediation steps tailored to your stack.

What It Catches

Secrets — 50 patterns validated against GitLeaks

AWS, GCP, Azure credentials
GitHub, GitLab, Slack tokens
Stripe, Twilio, SendGrid API keys
Database connection strings
Private keys (RSA, SSH, PGP)
OpenAI, Heroku, NPM, PyPI tokens
DigitalOcean, HashiCorp Vault, Terraform Cloud
Grafana, Shopify, Anthropic, Docker Hub
JWT tokens and signing secrets
High-entropy strings (charset-aware: hex, base64, generic)

</td> <td width="50%">

Vulnerabilities — 15 patterns mapped to OWASP Top 10

SQL injection sinks
XSS vectors (innerHTML, dangerouslySetInnerHTML)
Command injection
Server-side request forgery (SSRF)
Insecure deserialization (pickle, yaml.load)
Weak cryptography (MD5, SHA1, DES)
Disabled SSL verification
Debug mode in production

</td> </tr> <tr> <td colspan="2">

Dangerous File Types — 15 file patterns checked via git ls-files

Files that

Comments

More Agents

View all

agent-memory

Emulo

Mine your Claude Code and Codex logs into a local you.md agent profile.

ohad6k

193

lm-studio

Nyx Local Ai

Local-first AI coding agent for VS Code & Cursor. Ollama, LM Studio & your inference fleet. Cursor-grade agent UX — offline, private, zero token cost.

sthamann

248

Self Learning Skills

A self-improving skill for AI coding agents (Claude Code, Cursor, AGENTS.md): recognize a hard-won golden path in a session and harvest it into a reusable skill/rule for next time.

Kulaxyz

895

agentic-ai

FDEOps

Second brain for Forward Deployed Engineers. Engagement memory + 35 skills across 6 domains, all behind one @fde... Works with any AI coding agent.

suboss87

303

agent-skills

Awesome Gamedev Agent Skills

Game-development Agent Skills for AI coding agents: install once and a master router loads the right skill for your engine and task. 66 original, version-pinned skills (plus a master router) in the portable SKILL.md format that runs across Claude Code, Cursor, Codex, Copilot, Gemini CLI and more, for Godot, Unity, Unreal, web and beyond.

gamedev-skills

301

agents

Honey For Devs

Honey (I Shrunk the AI) by GreenPT: a cross-tool coding skill that cuts AI coding-agent token usage and LLM API costs — write less code, less prose, and denser agent-to-agent handoffs (−53%, lossless in benchmarks) with no loss of quality. Works with Claude Code, Cursor, GitHub Copilot, Codex, Gemini CLI, Windsurf, Cline & Kiro.

Green-PT

177