Security Audit & OWASP Review

Audit an application for security vulnerabilities across the OWASP Top 10. Reviews code for injection, XSS, broken access control, and insecure config, scans dependencies for CVEs, detects exposed secrets, and returns prioritized findings with severity ratings and concrete fixes.

This skill runs a structured security review of your application. It inspects code for OWASP Top 10 issues, audits dependencies for known CVEs, hunts for hardcoded secrets, checks authentication and access control, and produces a severity-ranked report where every finding comes with a reproducible description and a concrete remediation.

When to use

Use for a broad security review before a release or as a periodic audit — covering OWASP Top 10, dependency CVEs, secrets detection, and access-control checks with prioritized fixes.

Examples

Full OWASP Top 10 review

Broad application audit

Run a security audit of this app against the OWASP Top 10 and give me prioritized findings with fixes

Pre-release hardening

Ship with confidence

Do a security review of the changes in this release and flag anything risky before we deploy

Access control review

Catch authorization gaps

Review my API for broken access control and insecure direct object reference vulnerabilities