Web Security Auditor
Objective
Perform a comprehensive web application security review aligned to OWASP Top 10 and practical production hardening controls.
Required Workflow
A. Static Analysis (SAST)
- Run Semgrep for injection, secrets, crypto misuse, and prototype pollution.
- Run ESLint security plugins (
eslint-plugin-security,eslint-plugin-no-unsanitized). - Run Bandit for Python codebases.
B. Dependency Scanning (SCA)
- Run
npm audit,pip-audit, or `cargo aud
[Description truncada. Veja o README completo no GitHub.]