Security Audit Skill
Systematically audit code for common security vulnerabilities.
Workflow
1. Identify Attack Surface
Map entry points:
- API endpoints
- User input forms
- File uploads
- URL parameters
- Headers and cookies
- WebSocket messages
# Find API routes
grep -r "app.get\|app.post\|router\." --include="*.ts" --include="*.js"
# Find form handlers
grep -r "onSubmit\|handleSubmit" --include="*.tsx" --include="*.jsx"
2. Check OWASP Top 10
Go through ea
[Description truncada. Veja o README completo no GitHub.]