Exécutez n'importe quel Skill dans Manus
en un clic

Exécutez n'importe quel Skill dans Manus en un clic

security-audit

Étoiles4

Forks1

Mis à jour13 juillet 2026 à 20:34

Deep security audit for code changes or areas: auth/authz, data exposure, injection, secrets, dependency risk, and OWASP-style issues.

Installation

Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.

Exécuter dans Manus

Source

samcdavid

samcdavid/dotfiles

Ouvrir le dépôt GitHub Voir les dépôts du créateur

Téléchargement

Exécuter dans Manus

Métiers associésSOC

Basé sur la classification professionnelle SOC

Analystes en sécurité de l'informationProfessions informatiques et mathématiques·SOC 15-1212

Explorateur de fichiers

12 fichiers

SKILL.md

readonly

name	security-audit
description	Deep security audit for code changes or areas: auth/authz, data exposure, injection, secrets, dependency risk, and OWASP-style issues.

Security Audit

Review for concrete exploitable or data-exposure risk.

Load Rules

Read ~/.claude/rules/review-finding-format.md, ~/.claude/rules/pr-mode-readonly.md, and ~/.claude/rules/model-escalation.md when available. Use ~/.agents/rules/ under Codex. For full checklist, read references/protocol-index.md.

Flow

Determine scope from PR, diff, path, ticket, or user prompt.
Trace trust boundaries, auth/authz checks, input validation, data access, external calls, file upload/download paths, token handling, and secrets.
Check dependency or config changes for exposure.
Verify claims against code and framework behavior.
Classify by exploitability and impact.

Output

Findings must include affected asset/data, attacker or misuse path, evidence, impact, and concrete mitigation.

Plus depuis ce dépôt

même dépôt

address-pr-feedback

samcdavid/dotfiles

Address pending PR review feedback through verified triage, small fix phases, implementation, validation, and evidence-backed replies. Manual invocation only.

2026-07-134

autoresearch

samcdavid/dotfiles

Autonomous iteration loop for a measurable goal: review, ideate, modify, verify, keep or rollback, repeat until interrupted or capped.

2026-07-134

ci-babysit

samcdavid/dotfiles

Monitor a PR's CircleCI pipeline, diagnose failures, apply scoped fixes, push when requested, and continue until green or blocked.

2026-07-134

commit

samcdavid/dotfiles

Stage and commit changes in logical groups using the project's git message style, without mixing unrelated user changes.

2026-07-134

create-pr

samcdavid/dotfiles

Create or update a GitHub PR with concise description, review guidance, triggered specialty reviews, and focus areas.

2026-07-134

daily-summary

samcdavid/dotfiles

Build a daily work brief from yesterday/off-hours activity plus today's Linear, Calendar, Gmail, and Notion context; update Notion and produce standup/checklist.

2026-07-134

name	security-audit
description	Deep security audit for code changes or areas: auth/authz, data exposure, injection, secrets, dependency risk, and OWASP-style issues.

Security Audit

Review for concrete exploitable or data-exposure risk.

Load Rules

Flow

Determine scope from PR, diff, path, ticket, or user prompt.
Trace trust boundaries, auth/authz checks, input validation, data access, external calls, file upload/download paths, token handling, and secrets.
Check dependency or config changes for exposure.
Verify claims against code and framework behavior.
Classify by exploitability and impact.

Output

Findings must include affected asset/data, attacker or misuse path, evidence, impact, and concrete mitigation.