Agent skill · security · aiskillstore
security-audit
Comprehensive security auditing workflow covering web application testing, API security, penetration testing, vulnerability scanning, and security hardening.
Why this skill is useful
Adds a comprehensive set of executable workflows and commands for security auditing that are not commonly found in public documentation.
What it needs
About 3k tokens when loaded. Last updated 2026-08-07. 405 stars on the source repository.
What this skill does
Security Auditing Workflow Bundle Overview Comprehensive security auditing workflow for web applications, APIs, and infrastructure. This bundle orchestrates skills for penetration testing, vulnerability assessment, security scanning, and remediation. When to Use This Workflow Use this workflow when: Performing security audits on web applications Testing API security Conducting penetration tests Scanning for vulnerabilities Hardening application security Compliance security assessments Workflow Phases Phase 1: Reconnaissance Skills to Invoke scanning-tools - Security scanning shodan-reconnaissance - Shodan searches top-web-vulnerabilities - OWASP Top 10 Actions 1. Identify target scope 2. Gather intelligence 3. Map attack surface 4. Identify technologies 5. Document findings Copy-Paste Prompts Phase 2: Vulnerability Scanning Skills to Invoke vulnerability-scanner - Vulnerability analysis security-scanning-security-sast - Static analysis security-scanning-security-dependencies - Dependency scanning Actions 1. Run automated scanners 2. Perform static analysis 3. Scan dependencies 4. Identify misconfigurations 5. Document vulnerabilities Copy-Paste Prompts Phase 3: Web Application Testing Skills to Invoke top-web-vulnerabilities - OWASP vulnerabilities sql-injection-testing - SQL injection xss-html-injection - XSS testing broken-authentication - Authentication testing idor-testing - IDOR testing file-path-traversal - Path traversal burp-suite-testing - Burp Suite testing Actions 1. Test for injection flaws 2. Test authentication mechanisms 3. Test session management 4. Test access controls 5. Test input validation 6. Test security headers Copy-Paste Prompts Phase 4: API Security Testing Skills to Invoke api-fuzzing-bug-bounty - API fuzzing api-security-best-practices - API security Actions 1. Enumerate API endpoints 2. Test authentication/authorization 3. Test rate limiting 4. Test input validation 5. Test error handling 6. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aiskillstore/security-audit--3a07d4