Security Audit

This is a structured checklist for running security audits, organized into seven phases from reconnaissance through reporting. It points you to other skills for actual tooling (Burp Suite, Metasploit, various scanners) and gives you copy-paste prompts to invoke them in sequence. Useful if you're doing periodic audits and want a methodical walkthrough of OWASP Top 10 testing, API fuzzing, and pentest workflows. The value is in the structure and phase-by-phase prompts, not in novel techniques. Think of it as a security audit runbook that assumes you already have the component skills installed and know what findings to look for.

skills.sh installs: 863
GitHub stars: 43.1K
last updated: Jul 14, 2026

View on GitHub

Install

$ npx -y skills add sickn33/antigravity-awesome-skills --skill security-audit --agent claude-code

Installs into .claude/skills of the current project.

Files

Security Auditing Workflow Bundle

⚠️ AUTHORIZED USE ONLY This skill is for educational purposes or authorized security assessments only. You must have explicit, written permission from the system owner before using this tool. Misuse of this tool is illegal and strictly prohibited.

Mandatory confirmation gate

Before each active security action, state the exact target URL, IP, account, or resource, the written-authorization confirmation, permitted scope, exact command, expected effect and limits. Without confirmation, remain read-only and provide defensive guidance only. Wait for explicit confirmation in the current conversation before executing it. Existing scope does not authorize expanding targets or techniques.

Overview

Comprehensive security auditing workflow for web applications, APIs, and infrastructure. This bundle orchestrates skills for penetration testing, vulnerability assessment, security scanning, and remediation.