security-audit
Comprehensive security auditing workflow covering web application testing
by sickn33Free
Description
security-audit is an agent skill that is a comprehensive security auditing workflow for web applications, APIs and infrastructure. It orchestrates work across penetration testing, vulnerability assessment, security scanning and remediation, and it moves through phases, starting with reconnaissance. Use it when you are performing a security audit of a web application, testing the security of an API, running a penetration test, scanning for vulnerabilities, hardening an application's security, or preparing a compliance security assessment. Because the workflow covers active testing, it should only be run against systems you are authorised to test. It is part of the sickn33/agentic-awesome-skills repository on GitHub, which has about 47,600 stars. The listing shows it as free, and it has about 1,400 installs. Its security audits show passes from Gen Agent Trust Hub and Snyk, with a warning from Socket. Install it with npx skills add https://github.com/sickn33/agentic-awesome-skills --skill security-audit.…
Highlights
- Web application and API audits
- Penetration test workflow
- Vulnerability assessment and scanning
- Hardening and remediation
- Compliance security assessment
Ratings & Reviews
No ratings yet
Be the first to rate security-audit.
People also visit
application-security-testing
Application security testing (AppSec) across a whole product with Strix
find-security-vulnerabilities-in-code
Find security vulnerabilities in a codebase or repository with Strix
fix-security-vulnerabilities-with-strix
Fix security vulnerabilities found by a Strix pentest
security-audit FAQ
What does the workflow cover?
Web applications, APIs and infrastructure, through reconnaissance, testing, scanning and remediation phases.
Should it be run on any site?
Only on systems you are authorised to test, since the workflow includes active testing.
Does it help with compliance?
It covers compliance security assessments as one of its uses.
How do I install it?
Run npx skills add https://github.com/sickn33/agentic-awesome-skills --skill security-audit.
What do the security audits show?
skills.sh lists three audits: Gen Agent Trust Hub Pass, Socket Warn and Snyk Pass. A Warn or Fail is worth reading before you install.
What are the best security-audit alternatives?
Popular alternatives to security-audit include security-audit, api-security-testing and application-security-testing. See all security-audit alternatives