← Voltar para o catálogo
Deep security audit covering OWASP Top 10, authentication, authorization, data protection, dependency vulnerabilities, and secrets scanning. Delegates to the Centinela (QA) agent.
Ver no GitHub ↗
Copiar URL do repo
Copiar link do SKILL.md Licença: MIT
Como adicionar
Copiar comando
/plugin marketplace add davepoon/buildwithclaude
O comando exato pode variar conforme o repositório. Confira o README no GitHub.
Para o autor da skill
Cole no README do seu repo
Mostra que sua skill está catalogada na Skillteca, gera backlink e tráfego rastreável.
[](https://www.skillteca.com.br/skills/security-audit-davepoon)
Copiar snippet
Habilidade de pesquisa de segurança em Modo Equipe que orquestra 3 caçadores de vulnerabilidades e 2 engenheiros de PoC para auditar um código, provar explorabilidade, classificar causas raiz e calibrar a severidade. É utilizada para revisão de segurança, pesquisa de vulnerabilidades, auditoria de explorabilidade e validação de modelo de ameaças.
Segurança
por code-yeongyu
security-scanning-security-dependencies
You are a security expert specializing in dependency vulnerability analysis, SBOM generation, and supply chain security. Scan project dependencies across multiple ecosystems to identify vulnerabilities, assess risks, and provide automated remediation strategies.
Segurança
#ai
#git
por sickn33
Advanced vulnerability analysis principles. OWASP 2025, Supply Chain Security, attack surface mapping, risk prioritization.
Segurança
#ai
#git
por sickn33
dependency-management-deps-audit
You are a dependency security expert specializing in vulnerability scanning, license compliance, and supply chain security. Analyze project dependencies for known vulnerabilities, licensing issues, outdated packages, and provide actionable remediation strategies.
Segurança
#ai
#git
por sickn33
Alerta por categoria
1 email curto, só com as skills novas de Segurança. 4 minutos de leitura, sem spam, cancela com 1 clique.
Você confirma o email no primeiro envio. Sem spam. Cancela com 1 clique.
Ler descrição completa Recolher descrição Security Audit
Performs a deep security audit using the Centinela (QA) agent.
When to Use This Skill
Before a release to verify security posture After significant code changes that touch authentication, authorization, or data handling Periodic security review of the codebase When adding new dependencies or external integrations What This Skill Does
Runs the SIGN IN checklist Performs OWASP Top 10 systematic check (A01-A10) Scans for hardcoded secrets, API keys, tokens, and connection strings Audits dependencies for known CVEs Checks smart contracts if Solidity is present (reentrancy, overflow, access control) Runs Security Verification and Quality Verification checklists (TIME OUT) Issues verdict and writes report to docs/reviews/security-audit-{date}.md Prepares findings handoff to Dev agent How to Use
Basic Usage
/security-auditScoped Audit
/security-audit src/auth/ src/api/Example
User : /security-audit src/payments/
Output : A security audit report at docs/reviews/security-audit-2026-02-23.md with:
OWASP Top 10 findings organized by severity Secrets scan results Dependency vulnerability report Verdict: APPROVED or CHANGES REQUIRED Fix order recommendation for the Dev agent Tips
If no scope is specified, the entire src/ directory is audited Critical findings trigger the Non-Normal emergency checklist The agent will never attempt to fix vulnerabilities — only document them
Compartilhar
X
LinkedIn
Copiar link
