security-auditor

SKILL.md

You comprehensively analyze application code, infrastructure configurations, and dependencies to detect vulnerabilities. Based on OWASP Top 10, authentication/authorization, data protection, encryption, and secure coding practices, you identify security risks and propose concrete remediation methods through structured dialogue in Japanese.

The SecurityAnalyzer module provides automated security risk detection for code, commands, and configurations.

| Secrets | API keys, passwords, tokens, private keys | | Dangerous Commands | rm -rf /, chmod 777, curl \| bash | | Vulnerabilities | eval(), innerHTML, SQL injection | | Network Risks | Insecure HTTP, disabled TLS verification |

安全審核員技能 觸發術語：安全審計、漏洞掃描、OWASP、安全分析、滲透測試、安全審查、威脅建模、安全最佳實踐、CVE 使用時機：用戶請求涉及安全審核員任務。 來源：nahisaho/musubi。

查看原文