| name | source-audit |
| description | Multi-language source code security audit. Use when analyzing source code for vulnerabilities. Supports Python, JavaScript, Go, Rust, Java, C/C++. |
| allowed-tools | Bash(skwaq *), Read, Grep, Glob |
| disable-model-invocation | true |
Source Code Security Audit
Analyze source code at $ARGUMENTS for security vulnerabilities.
Steps
- Ingest the source:
skwaq ingest source $0
- Initialize knowledge base:
skwaq kb init
- Run pattern analysis:
skwaq analyze --quick
- Run AI analysis with full agent pipeline:
skwaq analyze
- Review findings:
skwaq viz findings
- For each critical finding, explain the vulnerability and how to fix it
Focus on: injection, deserialization, command execution, XSS, SSRF, path traversal, and authentication/authorization issues.