Audit Security — Security skill for Claude Code
Security audit (OWASP Top 10, PHP-specific vulnerabilities).
How to install Audit Security
Installs to ~/.claude/skills/dykyi-roman-awesome-claude-code-audit-security/SKILL.md
mkdir -p ~/.claude/skills/dykyi-roman-awesome-claude-code-audit-security && curl -fsSL https://raw.githubusercontent.com/dykyi-roman/awesome-claude-code/HEAD/commands/audit-security.md -o ~/.claude/skills/dykyi-roman-awesome-claude-code-audit-security/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Audit Security does
description: Security audit (OWASP Top 10, PHP-specific vulnerabilities). Analyzes input validation, injection, authentication, authorization, CSRF, XSS, XXE, SSRF, deserialization, path traversal. allowed-tools: Read, Grep, Glob, Task model: opus argument-hint: [level] [-- meta-instructions]
Security Audit
Perform a comprehensive security audit focusing on OWASP Top 10 and PHP-specific vulnerabilities.
Input Parsing
Parse `$ARGUMENTS` to extract path, level, and optional
Alternatives in Security
- Security Best Practices — Review code for language-specific security vulnerabilities 14.6k ★
- Security Guidance — Hook that warns about command injection, XSS, and unsafe patterns 14k ★
- Security Guardian — Comprehensive security analysis for RTK CLI tool, focusing on command injection, shell escaping, hook security 11.9k ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Secure Vibe
Open-source security skill for AI agents (opencode / Codex / Claude Code). Detects 97 secret/injection/deseria
API Security
API security audit (OWASP API Security Top 10 2023): BOLA/IDOR, broken authentication, broken object-property-
Chain
Build an exploit chain — given bug A, finds B and C to combine for higher severity and payout. Knows common ch
Hunt
Start hunting on a target — loads scope, reads disclosed reports, picks best attack surface based on tech stac
Pentest
Run an AI-powered penetration test against a target URL + source code repo. Usage: /pentest [--config ] --ski
Audit Docker
Audit Docker configuration. Analyzes Dockerfile, Compose, security, performance, and production readiness for
Related Agents
Ehs Web API
Web, backend and API security specialist for the Ethical Hacker Squad. Reviews authentication, object- and fun
Auth Reviewer
Authentication and authorization security reviewer. Analyzes authentication mechanisms, access control, CSRF p
AI Security
Security review for a change in a project with .ai/ — authentication, authorization, secrets, personal and pay