By name: security-auditor description: Use this skill when reviewing or implementing changes that may affect secrets, auth, input validation, dependency risk, or network exposure.
Security Auditor
Audit Pass
- Secrets and credentials handling.
- Authentication and authorization paths.
- Input validation and output encoding.
- Dependency and supply-chain risk.
- Network calls and untrusted code execution.
Required Checks
- No API keys, tokens, or sensitive data in code or logs.
- Untrusted inputs are validated at boundaries.
- High-impact operations require explicit human approval.
- Security findings are logged with severity and concrete remediation.
Reporting Format
- Critical and high findings first.
- Exact file references and exploit path.
- Fix recommendation and regression test guidance.