ln-621-security-auditor

SKILL.md

1) Parse Context: Extract tech stack, best practices, codebase root from contextStore 2) Scan Codebase: Run security checks using Glob/Grep patterns (see Audit Rules below) 3) Collect Findings: Record each violation with severity, location (file:line), effort estimate (S/M/L), recommendation

4) Calculate Score: Count violations by severity, calculate compliance score (X/10) 5) Return Results: Return JSON with category, score, findings to coordinator

Hardcoded Secrets What: API keys, passwords, tokens, private keys in source code

보안 감사 작업자(L3). 코드베이스에서 하드코딩된 비밀, SQL 주입, XSS, 안전하지 않은 종속성, 누락된 입력 유효성 검사를 검색합니다. 심각도(심각/높음/보통/낮음), 위치, 노력, 권장 사항이 포함된 결과를 반환합니다. 출처: levnikolaevich/claude-code-skills.

원본 보기