| name | security-audit |
| description | Perform security assessments, vulnerability scanning, and OWASP compliance checks for banking applications |
Security Audit Skill
When to Use
Invoke for security reviews, vulnerability assessments, or compliance audits.
OWASP Top 10 Checklist (Banking Focus)
- Injection: SQL injection, command injection — parameterized queries only
- Broken Authentication: Session management, MFA, password policies
- Sensitive Data Exposure: PII encryption, PCI-DSS card masking
- XML External Entities: Disable DTD processing
- Broken Access Control: RBAC validation, privilege escalation checks
- Security Misconfiguration: Default credentials, unnecessary services
- XSS: Input sanitization, CSP headers, output encoding
- Insecure Deserialization: Whitelist-based deserialization
- Known Vulnerabilities: Snyk scan, dependency updates
- Insufficient Logging: Audit trail completeness, tamper detection
Banking-Specific Security Checks