Security Audit
A solid starting point for security reviews that walks you through the OWASP Top 10, dependency scanning, auth patterns, and input validation. You get a categorized checklist covering injection flaws, access control, crypto failures, and secret management, plus guidelines for documenting findings by severity. It's comprehensive without being overwhelming, though you'll still need to know what you're looking for. Best used when you need a structured approach to catch common vulnerabilities rather than hunting for exotic attack vectors. Think of it as the security equivalent of a pre-flight checklist, it won't replace expertise but it ensures you don't skip the basics.
- skills.sh installs
- 160
- GitHub stars
- 19
- last updated
- Aug 21, 2026
Install
$ npx -y skills add s-hiraoku/synapse-a2a --skill security-audit --agent claude-codeInstalls into .claude/skills of the current project.
Files
Security Audit Skill
This skill provides a comprehensive framework for security auditing, ensuring that common vulnerabilities are identified and addressed during development and review.
Audit Checklist
1. OWASP Top 10 & Common Vulnerabilities
- Injection: Check for SQL, Command, or NoSQL injection points. Ensure parameterized queries or proper escaping is used.
- Broken Access Control: Verify that users cannot access resources outside of their intended permissions.
- Insecure Design: Evaluate the overall architecture for security flaws.
- Cryptographic Failures: Ensure sensitive data (passwords, PII) is encrypted at rest and in transit using modern algorithms (e.g., AES-256, TLS 1.3).
2. Dependency Management
- Vulnerability Scanning: Check for known vulnerabilities in third-party libraries (e.g., using
npm audit,pip-audit, orsnyk). - Outdated Packages: Identify and update significantly outdated dependencies.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/s-hiraoku/synapse-a2a
- Categories
- Backend & APIs, Security, Git & Pull Requests, Documentation, Code Review & Quality
- First seen
- Jun 3, 2026
More from s-hiraoku/synapse-a2a
All 4Recommended
More Backend & APIs
setup-cloudbase-openclawtencentcloudbase/skillsCloudBase (腾讯云开发) 适用场景：全栈 Web、微信小程序、静态托管、云函数、云托管、文档/MySQL 数据库、身份认证、云存储等。用于在 OpenClaw/Moltbot 下配置 CloudBase（mcporter + 提示词约束，无脚本、设备码登录）。157skills.sh installs
ai-chatandrelandgraf/fullstackrecipesBuild a complete AI chat application with database persistence, chat list management, and automatic title generation.156skills.sh installs
neon-serverless-postgresbobmatnyc/claude-mpm-skillsNeon serverless Postgres with autoscaling, instant database branching, and zero-downtime deployments. Use when building serverless applications, implementing da156skills.sh installs
tuzi-danger-x-to-markdowntuziapi/tuzi-skills将 X (Twitter) 推文和文章转换为带 YAML front matter 的 Markdown。使用逆向工程 API，需要用户同意。当用户提到"X转markdown"、"保存推文"、或提供 x.com/twitter.com 链接时使用。156skills.sh installs
aws-serverless-deploymentawslabs/agent-pluginsAWS SAM and AWS CDK deployment for serverless applications. Triggers on phrases like: use SAM, SAM template, SAM init, SAM deploy, CDK serverless, CDK Lambda co154skills.sh installs
xiaohongshu-publishersolar-luna/fully-automatic-article-generation-skill自动发布内容到小红书平台。支持将文章转换为小红书格式（≤1000字，emoji风格）并通过API直接发布。当用户说"发布到小红书"、"推送到小红书"、"小红书发布"时使用此Skill。151skills.sh installs