Run any Skill in Manus with one click

security-audit

Stars4

Forks1

UpdatedJuly 13, 2026 at 20:34

Deep security audit for code changes or areas: auth/authz, data exposure, injection, secrets, dependency risk, and OWASP-style issues.

Installation

Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.

Run Skill in Manus

Source

samcdavid

samcdavid/dotfiles

View GitHub Repository View Creator Repositories

Download

Run Skill in Manus

Related occupationsSOC

Based on SOC occupation classification

Information Security AnalystsComputer and Mathematical Occupations·SOC 15-1212

File Explorer

12 files

SKILL.md

readonly

name	security-audit
description	Deep security audit for code changes or areas: auth/authz, data exposure, injection, secrets, dependency risk, and OWASP-style issues.

Security Audit

Review for concrete exploitable or data-exposure risk.

Load Rules

Read ~/.claude/rules/review-finding-format.md, ~/.claude/rules/pr-mode-readonly.md, and ~/.claude/rules/model-escalation.md when available. Use ~/.agents/rules/ under Codex. For full checklist, read references/protocol-index.md.

Flow

Determine scope from PR, diff, path, ticket, or user prompt.
Trace trust boundaries, auth/authz checks, input validation, data access, external calls, file upload/download paths, token handling, and secrets.
Check dependency or config changes for exposure.
Verify claims against code and framework behavior.
Classify by exploitability and impact.

Output

Findings must include affected asset/data, attacker or misuse path, evidence, impact, and concrete mitigation.

More from this repository

same repository

address-pr-feedback

samcdavid/dotfiles

Address pending PR review feedback through verified triage, small fix phases, implementation, validation, and evidence-backed replies. Manual invocation only.

2026-07-134

autoresearch

samcdavid/dotfiles

Autonomous iteration loop for a measurable goal: review, ideate, modify, verify, keep or rollback, repeat until interrupted or capped.

2026-07-134

ci-babysit

samcdavid/dotfiles

Monitor a PR's CircleCI pipeline, diagnose failures, apply scoped fixes, push when requested, and continue until green or blocked.

2026-07-134

commit

samcdavid/dotfiles

Stage and commit changes in logical groups using the project's git message style, without mixing unrelated user changes.

2026-07-134

create-pr

samcdavid/dotfiles

Create or update a GitHub PR with concise description, review guidance, triggered specialty reviews, and focus areas.

2026-07-134

daily-summary

samcdavid/dotfiles

Build a daily work brief from yesterday/off-hours activity plus today's Linear, Calendar, Gmail, and Notion context; update Notion and produce standup/checklist.

2026-07-134

name	security-audit
description	Deep security audit for code changes or areas: auth/authz, data exposure, injection, secrets, dependency risk, and OWASP-style issues.

Security Audit

Review for concrete exploitable or data-exposure risk.

Load Rules

Flow

Determine scope from PR, diff, path, ticket, or user prompt.
Trace trust boundaries, auth/authz checks, input validation, data access, external calls, file upload/download paths, token handling, and secrets.
Check dependency or config changes for exposure.
Verify claims against code and framework behavior.
Classify by exploitability and impact.

Output

Findings must include affected asset/data, attacker or misuse path, evidence, impact, and concrete mitigation.