Claude MarketplacesSubmit
netresearch avatar

Security Audit

netresearch/security-audit-skill

A comprehensive security assessment toolkit that handles everything from OWASP Top 10 and CWE Top 25 checks to cloud infrastructure auditing across AWS, Azure, and GCP. Ships with 80+ PHP/TYPO3 checkpoints and reference files covering XXE, SQLi, XSS, CSRF, deserialization, and modern attack vectors. The automated dispatcher detects your stack from indicator files and runs the appropriate scanners across 17 ecosystems. Most useful for teams doing regular security reviews who want proven patterns and checklists in one place rather than cobbling together checks from scattered documentation. The GitHub Actions security guidance alone, especially the input interpolation rules, is worth having on hand.

skills.sh installs
839
GitHub stars
52
last updated
Aug 21, 2026
View on GitHub

Install

$ npx -y skills add netresearch/security-audit-skill --skill security-audit --agent claude-code

Installs into .claude/skills of the current project.

Files

Security Audit Skill

Security audit patterns (OWASP Top 10, LLM Top 10 2025, CWE Top 25 2025, CVSS v4.0), cloud/IaC, GitHub security. 80+ PHP/TYPO3 checkpoints (v14.3 LTS in typo3-security.md).

Expertise Areas

  • Vulnerabilities: XXE, SQLi, XSS, CSRF, command injection, path traversal, file upload, deserialization, SSRF, SSTI, JWT, type juggling
  • Standards: OWASP Top 10 / API / LLM (2025), CWE Top 25, CVSS v3.1/v4.0, OWASP ASVS
  • Cloud & IaC: AWS; Terraform, Kubernetes, Docker, Helm
  • API & Frontend: REST/GraphQL authZ, rate limits, mass assignment, CSP, DOM-XSS
  • AI Agents: SKILL.md/AGENTS.md/CLAUDE.md/mcp.json/hooks.json audit; prompt injection; excessive agency

Reference Files (in references/, .md implied)

SKILL.md on GitHub

Sponsors

Promote your product hereReach 125k+ visitors monthlyPromote your product hereReach 125k+ visitors monthlyAgent CaffeineSponsoredClose your lid, come back to finished workSnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthlyWaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthlyknobsSponsoredSee your site on any phone, any day, in any language

Details

Repository
github.com/netresearch/security-audit-skill
Categories
Frontend Development, Backend & APIs, Security, DevOps & CI/CD, AI & Agent Building, Cloud & Infrastructure, PHP & Laravel
First seen
Jun 3, 2026

Recommended

More Frontend Development
1bitjaru avatarss-pagebitjaru/styleseedScaffold a new mobile page/screen using the StyleSeed layout patterns835skills.sh installs
2mindrally avatarthree-jsmindrally/skillsExpert guidance for Three.js and React Three Fiber development with modern React, TypeScript, and performance best practices834skills.sh installs
3daymade avatarscrapling-skilldaymade/claude-code-skillsInstall, troubleshoot, and use Scrapling CLI to extract HTML, Markdown, or text from webpages. Use this skill whenever the user mentions Scrapling, `uv tool ins827skills.sh installs
4aaronvanston avatarpresentation-designaaronvanston/skills-presentationsVisual design guidance for bold, minimal presentations. Provides layout patterns, typography hierarchy, color specifications, and slide composition rules. Use w819skills.sh installs
5nexu-io avatartaste-skillnexu-io/open-designHigh-agency frontend skill that gives AI good taste with tunable design variance, motion intensity, and visual density to stop generic UI slop.808skills.sh installs
6posit-dev avatarshiny-bslib-themingposit-dev/skillsAdvanced theming for Shiny apps using bslib and Bootstrap 5. Use when customizing app appearance with bs_theme(), Bootswatch themes, custom colors, typography, 807skills.sh installs