| name | security-audit |
| description | Security vulnerability scanner — scans repo for hardcoded secrets, injection vectors, unsafe patterns, Docker/CI misconfigs, and policy violations. Use when checking security posture or before releases. |
| argument-hint | ["secrets|code|infra|full"] |
| (default | full) |
| allowed-tools | Bash(grep *), Bash(git *), Bash(cat *), Bash(find *), Bash(ls *), Bash(wc *), Read, Grep, Glob |
| context | fork |
Security Audit — Trinity Repository
Scope: $ARGUMENTS
Run a comprehensive security audit. Default scope is full (all categories).
Phase 1: Secrets & Credentials
Search for hardcoded secrets, leaked tokens, and credential mismanagement.
Check hardcoded keys:
!grep -rn "sk-\|ghp_\|Bearer \|password\|api_key.*=.*['\"]" --include="*.zig" --include="*.yml" --include="*.json" src/ tools/ .github/ 2>/dev/null | grep -v "test\|example\|REDACTED\|placeholder" | head -20
Check .env in git:
!git ls-files | grep -i "\.env$\|credentials\|\.key$\|\.pem$" | head -10
Check gitignore coverage:
!cat .gitignore | grep -i "env\|secret\|key\|token\|credential" | head -10
Phase 2: Code Vulnerabilities
Scan Zig source for injection, buffer overflows, unsafe patterns.
Command injection vectors (shell exec without sanitization):
!grep -rn "ChildProcess\|std.process\|runCommand\|spawnProcess" --include="*.zig" src/ tools/ | head -15
Unsafe JSON parsing (manual string search instead of std.json):
!grep -rn "indexOf.*\"\|mem.indexOf.*json\|extractJson" --include="*.zig" tools/mcp/ src/ | head -15
Unvalidated input used in file paths:
!grep -rn "openFileAbsolute\|createFileAbsolute\|writeFileAbsolute" --include="*.zig" src/ tools/ | head -15
Missing auth checks on HTTP handlers:
!grep -rn "0\.0\.0\.0\|listen\|bind_address" --include="*.zig" src/ tools/ | head -10
Phase 3: Infrastructure & Docker
Unpinned Docker base images:
!grep -rn "^FROM " Dockerfile* docker/Dockerfile* deploy/Dockerfile* 2>/dev/null | grep -v "@sha256" | head -10
Zig download without checksum:
!grep -rn "wget.*zig\|curl.*zig" Dockerfile* docker/Dockerfile* deploy/Dockerfile* 2>/dev/null | grep -v "sha256" | head -10
GitHub Actions secret exposure:
!grep -rn "ANTHROPIC_API_KEY\|RAILWAY_API_TOKEN\|TELEGRAM_BOT_TOKEN" .github/workflows/*.yml 2>/dev/null | grep -v "secrets\." | head -10
Overly broad permissions in workflows:
!grep -B2 -A2 "permissions:" .github/workflows/*.yml 2>/dev/null | head -20
Phase 4: Policy Violations
Bash scripts (BANNED by CLAUDE.md):
!find . -name "*.sh" -not -path "./.git/*" -not -path "./fpga/prjxray/*" -not -path "./fpga/nextpnr-xilinx/*" 2>/dev/null | head -15
Shell entrypoints in Dockerfiles:
!grep -rn "ENTRYPOINT.*\.sh\|CMD.*\.sh\|CMD.*bash" Dockerfile* docker/Dockerfile* deploy/Dockerfile* 2>/dev/null | head -10
Phase 5: Analysis
Based on the scan results above, produce a security report:
- CRITICAL — immediate action required (secrets in code, injection vectors)
- HIGH — should fix before next deploy (Docker, CI exposure)
- MEDIUM — plan to fix (missing auth, rate limiting)
- LOW — nice to have (permissions, policy cleanup)
Format as a table with: Severity | File:Line | Issue | Suggested Fix
Known Vulnerabilities (from last audit 2026-03-13)
| ID | Severity | Component | Issue |
|---|
| SEC-01 | CRITICAL | git_ops.zig:29 | GitHub token embedded in git clone URL |
| SEC-02 | CRITICAL | agent-spawn-pool.yml:150 | API keys in GraphQL mutation JSON (log exposure) |
| SEC-03 | HIGH | cloud_monitor.zig:719 | Manual JSON parsing — injection risk |
| SEC-04 | HIGH | cloud_monitor.zig:480 | Race condition on shared state (no mutex) |
| SEC-05 | HIGH | Dockerfiles | Unpinned base images + no checksum on Zig download |
| SEC-06 | HIGH | deploy/*.sh | Bash entrypoints violate CLAUDE.md ban |
| SEC-07 | MEDIUM | tool_executor.zig:228 | Bash whitelist bypass via command chaining |
| SEC-08 | MEDIUM | cloud_monitor.zig:63 | Empty MONITOR_TOKEN bypasses auth |
| SEC-09 | MEDIUM | session_store.zig:55 | Session files world-readable (0644) |
| SEC-10 | MEDIUM | http_api.zig:19 | Services bind 0.0.0.0 without auth |
| SEC-11 | MEDIUM | workflows | No input sanitization on dispatch inputs |
| SEC-12 | MEDIUM | CI/CD | No container image security scanning |
| SEC-13 | LOW | grok_provider.zig:17 | Placeholder API key as fallback |
| SEC-14 | LOW | Dockerfile.px-bridge:52 | Token in HEALTHCHECK URL parameter |
Compare current scan results with this baseline. Report NEW issues and FIXED issues.
