Best use case
security-audit is best used when you need a repeatable AI agent workflow instead of a one-off prompt.
Run a security audit on the project (dependencies, secrets, OWASP)
Teams using security-audit should expect a more consistent output, faster repeated execution, less prompt rewriting.
When to use this skill
- You want a reusable workflow that can be run more than once with consistent structure.
When not to use this skill
- You only need a quick one-off answer and do not need a reusable workflow.
- You cannot install or maintain the underlying files, dependencies, or repository context.
Installation
Claude Code / Cursor / Codex
$curl -o ~/.claude/skills/security-audit/SKILL.md --create-dirs "https://raw.githubusercontent.com/hivellm/rulebook/main/.claude/skills/security-audit/SKILL.md"
Manual Installation
- Download SKILL.md from GitHub
- Place it in
.claude/skills/security-audit/SKILL.mdinside your project - Restart your AI agent — it will auto-discover the skill
How security-audit Compares
| Feature / Agent | security-audit | Standard Approach |
|---|---|---|
| Platform Support | Not specified | Limited / Varies |
| Context Awareness | High | Baseline |
| Installation Complexity | Unknown | N/A |
Frequently Asked Questions
What does this skill do?
Run a security audit on the project (dependencies, secrets, OWASP)
Where can I find the source code?
You can find the source code on GitHub using the link provided at the top of the page.
SKILL.md Source
Perform a comprehensive security audit of this project. If $ARGUMENTS is provided, focus the audit on that specific area. Steps: 1. Run dependency audit (npm audit, pip-audit, cargo audit, etc.) 2. Scan for hardcoded secrets, API keys, and credentials 3. Review authentication and authorization patterns 4. Check for OWASP Top 10 vulnerabilities in the codebase 5. Report findings categorized by severity (critical/high/medium/low)
Related Skills
We are still matching the closest adjacent skills for this page. In the meantime, continue through the full directory.