AGENT SKILL
security-audit
暂无简介
- License 许可
- Apache-2.0
- 最近更新
- 2026-11-13
- Stars
- ★ 4
- Forks
- 17
02 资源文件 2
- 参考文档references/doc-standards.md1.8 KB
- 参考文档references/report-templates.md2.8 KB
03 SKILL.md 正文
security-audit
Structured security audit: GitHub security surface (Dependabot/CodeQL/advisories) + three-pass code review (authz/CSRF/OAuth, XSS, SQLi/files) with verify-before-fix and dismissal-only-with-proof. Not general code-quality audit (code-audit), doc health (docs-audit), or process analysis (retrospective-analysis). Load on security review requests, before release/staging→current gates, or when triaging security alerts.
See: .skills/security-audit/README.md
