ln-621-security-auditor

SKILL.md

1) Parse Context: Extract tech stack, best practices, codebase root from contextStore 2) Scan Codebase: Run security checks using Glob/Grep patterns (see Audit Rules below) 3) Collect Findings: Record each violation with severity, location (file:line), effort estimate (S/M/L), recommendation

4) Calculate Score: Count violations by severity, calculate compliance score (X/10) 5) Return Results: Return JSON with category, score, findings to coordinator

Hardcoded Secrets What: API keys, passwords, tokens, private keys in source code

Security audit worker (L3). Scans codebase for hardcoded secrets, SQL injection, XSS, insecure dependencies, missing input validation. Returns findings with severity (Critical/High/Medium/Low), location, effort, and recommendations. Source: levnikolaevich/claude-code-skills.

View raw