Claude Skill MartBrowse skillsQuick linesLearn by videoTerminal guideWhat is a Skill?
 
← Back to list

Security Audit

Runs a deep security audit across OWASP Top 10, secrets, and dependency CVEs, then writes a dated report with an approval verdict.

Security & ReviewIntermediate★ 3,456⑂ 505AI score 7/10Last updated: Sep 14, 2026

What it does

  • Systematically walks the OWASP Top 10 (A01–A10) against your codebase.
  • Scans for hardcoded secrets: API keys, tokens, and connection strings.
  • Audits dependencies for known CVEs, plus Solidity checks (reentrancy, overflow, access control) when smart contracts are present.
  • Writes findings to docs/reviews/security-audit-{date}.md, grouped by severity, with an APPROVED or CHANGES REQUIRED verdict.
  • Documents rather than fixes — it hands a prioritized fix order to the Dev agent.

Who it's for

  • Backend and full-stack developers doing a pre-release security pass.
  • Teams that just touched authentication, authorization, or sensitive data flows.
  • Anyone adding new dependencies or third-party integrations.
  • Small teams that want a repeatable periodic security review.

Examples

  1. /security-audit — no scope given, so the whole src/ tree is audited.
  2. /security-audit src/payments/ — focused audit of the payments module with severity-ranked findings.
  3. /security-audit src/auth/ src/api/ — audit auth and API layers together and get a release verdict.

· · · Install guide · · ·

Try it now, no install

Paste this into Claude to use the skill without installing anything.

Read the instructions in this file and follow them to help me:
https://raw.githubusercontent.com/davepoon/buildwithclaude/HEAD/plugins/agent-triforce/skills/security-audit/SKILL.md

What I want: (describe your task here)

If Claude can't open the link, open it yourself and paste the contents instead.

↓ If it works for you, download the ZIP below and install it. Then it runs on its own — no pasting each time.

Install in the Claude app (no terminal)
  1. Download the ZIP with the button below.
  2. In Claude, open Settings → Capabilities and turn on 'Code execution and file creation'. (one time)
  3. Go to Customize → Skills → + → 'Upload a skill' and upload the ZIP.
↓ Download ZIP
Install in Claude Code

Let Claude do it — paste this into Claude Code

Install the skill I found on Claude Skill Mart.
Copy the plugins/agent-triforce/skills/security-audit folder from the GitHub repo davepoon/buildwithclaude into my ~/.claude/skills/security-audit/.
When it's done, tell me in one line what this skill can do.

Install with a command instead

git clone https://github.com/davepoon/buildwithclaude.git /tmp/buildwithclaude && mkdir -p ~/.claude/skills && cp -r /tmp/buildwithclaude/plugins/agent-triforce/skills/security-audit ~/.claude/skills/

⚠ This is a third-party skill. Check the source repository before installing.

  1. Open a terminal in your working directory.
  2. Clone the repo: git clone https://github.com/davepoon/buildwithclaude.git
  3. Create the skills folder: mkdir -p ~/.claude/skills
  4. Copy the skill: cp -r buildwithclaude/plugins/agent-triforce/skills/security-audit ~/.claude/skills/
  5. This skill delegates to the Centinela (QA) agent from the agent-triforce plugin — install the full plugins/agent-triforce for complete behavior.
  6. Launch Claude Code in your project root and run /security-audit or /security-audit src/auth/.
  7. Reports land in docs/reviews/security-audit-<date>.md, so make sure that path is writable.
View source on GitHub ↗License: MIT