ralph-security

name	ralph-security
description	Comprehensive security audit with 100 iterations (~30-60 min). Use when user says 'security audit', 'ralph security', 'weekly security check', 'audit this project', 'new project security review', or 'check for vulnerabilities'. Covers OWASP Top 10, auth, secrets, infrastructure, and code quality.
metadata	{"openclaw":{"emoji":"🛡️"},"author":"dorukardahan","version":"2.0.0","category":"security","tags":["security","audit","owasp","comprehensive"]}

Ralph Security — 100 Iterations (~30-60 min)

Comprehensive security audit with balanced depth and duration.

References

• Severity definitions and triage guidance

Instructions

Execution Engine

YOU MUST follow this loop for EVERY iteration:

1. STATE: Read current iteration (start: 1)
2. PHASE: Determine phase from iteration number
3. ACTION: Perform ONE check from current phase
4. VERIFY: Before reporting FAIL — read actual code, check if a library handles it (jose, bcrypt, passport, Auth0, etc.), check DB constraints, check environment gating. If inconclusive: NEEDS_REVIEW, not FAIL.
5. REPORT: Output iteration result
6. SAVE: Every 10 iterations, update .ralph-report.md
7. INCREMENT: iteration = iteration + 1
8. CONTINUE: IF iteration <= 100 GOTO Step 1