// "Automated security audit for Justice Companion: validates encryption keys, GDPR compliance, input validation, and OWASP best practices. Use when implementing security features, before releases, or when asked about security posture."
| name | security-audit |
| description | Automated security audit for Justice Companion: validates encryption keys, GDPR compliance, input validation, and OWASP best practices. Use when implementing security features, before releases, or when asked about security posture. |
| allowed-tools | ["Read","Grep","Bash","mcp__memory__*"] |
Comprehensive security validation for Justice Companion's privacy-first architecture.
.env file not committed to gitENCRYPTION_KEY_BASE64 migrated to KeyManager (safeStorage)%APPDATA%/.encryption-key has 0o600 permissionsdata_processing and data_erasure_requestVerify AES-256-GCM encryption on 11 database fields:
users.emailusers.full_namecases.titlecases.descriptionevidence.file_pathevidence.noteschat_conversations.message_contentdocuments.file_pathcontacts.emailcontacts.phone_numbercontacts.addresspnpm audit// Claude automatically runs this skill when:
user: "Is our app secure enough for production?"
// Claude checks:
// 1. Greps for "ENCRYPTION_KEY" in git history
// 2. Reads KeyManager tests for coverage
// 3. Validates GDPR rate limits in GdprService.ts
// 4. Checks Zod schemas in all repositories
// 5. Stores results in mcp__memory for future reference
Security Audit Report:
Risk Score: LOW (2/10) Recommendation: Address moderate vulnerabilities before v1.0 release.