ln-54-codebase-auditor
Audits cross-cutting codebase health, security and maintainability; not a single-change review or specialist audit.
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-22 00:14
Security & auditing
7,284 results
mcsb
Microsoft Cloud Security Benchmark (MCSB v2) control-domain taxonomy and NIST 800-53 / CIS Controls crosswalk for planning and reviewing Azure cloud resources.
moai-platform-auth0
Auth0 security specialist covering attack protection, multi-factor authentication, token security, sender constraining, and compliance. Use when implementing…
implementing-data-loss-prevention-with-microsoft-purview
Implements DLP policies using Microsoft Purview PowerShell cmdlets and the Graph API to protect data across Exchange Online, SharePoint, OneDrive, Teams,…
secrets-exposure-review
Use this skill when you need evidence-bounded secrets-exposure-review analysis and validation preparation; triggers include 敏感信息暴露审查 and...
security-audit
This skill should be used when the user says "security audit", "check for vulnerabilities", "security review", "harden project", "dependency audit",…
1password
Set up op CLI, sign in, and read or inject secrets.
compliance-automation
Use when implementing policy-as-code, continuous compliance monitoring, automated evidence collection, or audit-ready systems requiring SOC2/ISO/PCI/HIPAA…
track-findings
Track validated Codex Security findings in Linear, Jira, GitHub issues, or draft GitHub security advisories. Supports issue batches, duplicate checks, and…
security
This skill should be used when auditing code for security issues, reviewing authentication/authorization, evaluating input validation, analyzing cryptographic…
payuni-checkout
Implements PAYUNi UPP checkout integration including AES256 encryption, form submission, and payment callback handling. Use when integrating payment gateway,…
security-specialist
Provides security audit, risk assessment, and compliance check capabilities. Use when security review, risk assessment, or compliance verification is needed.
agentic-app-risk-review
Defensive review of an LLM/agent application for OWASP-LLM-style risks — prompt injection, unsafe tool calls, excessive agency, and PII/secret leakage. Reads…
iac-misconfig-scan
Scan infrastructure-as-code — Dockerfiles, Compose, Terraform, and GitHub Actions — for security misconfigurations like running as root, world-writable files,…
mixed-content-scan
Scan an HTTPS page for mixed content — HTTP scripts, styles, images, iframes, and insecure form actions. Separates browser-blocked active mixed content from…
0xcarnemuerta-security-hub-portfolio
Browser-based security portfolio and technical blog covering AI security, data protection, ML threats, and secure engineering practices
carnemuerta-security-portfolio
Browser-based security portfolio and technical blog covering AI security, data protection, ML threats, and secure engineering practices
wordpress-security-review
Use when the user asks 'is my site secure', 'run a security audit', 'check for vulnerabilities', 'was my site hacked', or 'fix the vulnerable plugins'. Runs…
audit-plugin-l5
Triggers the L5 Red Team Sub-Agent to rigorously audit a plugin against the 39-point L4 pattern matrix.
gdpr-data-handling
Implement GDPR-compliant data handling with consent management, data subject rights, and privacy by design. Use when building systems that process EU personal…
protocol-reverse-engineering
Master network protocol reverse engineering including packet analysis, protocol dissection, and custom protocol documentation. Use when analyzing network…
codex-security
OWASP Top 10 security review using Codex exec. Supports review loop with context preservation.
ai-infrastructure-attack
AI/ML infrastructure security testing. Use when the target involves Jupyter Notebook/JupyterHub/JupyterLab, MLflow, Ray Dashboard, Kubeflow, Gradio/Streamlit applications, vLLM/TGI/Ollama inference services, or any machine learning platform. When ports are discovered…
java-auth-config-audit
Java source code authentication and configuration security audit. Triggered when authentication bypass, authorization flaws, or security configuration issues need to be detected in Java white-box audits. Covers 6 categories of risk: authentication bypass (URI parsing discrepancies in Spring Security/Shiro Filter chains), privilege escalation (IDOR/horizontal privilege escalation/vertical privilege escalation), JWT security (algorithm confusion/key leakage/Claims...