Security audit skill providing comprehensive scanning and vulnerability detection, including input validation, path traversal prevention, CVE detection, and secure coding pattern enforcement.
Tasks
Run a full-depth security scan on the codebase and output the results to security-report.json using 'npx @claude-flow/cli security scan --depth full --output security-report.json'.
Scan project dependencies for known high-severity CVEs using 'npx @claude-flow/cli security cve --scan --severity high' and remediate findings using the cve-remediate script at .agents/scripts/cve-remediate.sh.
Check for hardcoded secrets in the codebase using 'npx @claude-flow/cli security validate --check secrets'.
security-report.json (from full scan with --output flag)
SECURITY.md (from audit report with --format markdown --output SECURITY.md)
Limitations and checks
The skill description does not document platform support requirements beyond npx availability.
No explicit versioning or dependency version constraints are documented.
Verify no hardcoded secrets are present by running 'npx @claude-flow/cli security validate --check secrets' before merging authentication or payment processing changes.
Confirm input validation checks pass for API endpoint creation by running 'npx @claude-flow/cli security scan --check input-validation --path ./src/api'.
Ensure the dependency CVE scan reports no high-severity vulnerabilities by running 'npx @claude-flow/cli security cve --scan --severity high' during CI.