← All skills
code-security-audit
65 / 100 · Review before installing
Check before installing. Some of what it can do is expected: a security skill usually runs scanners and checks websites.
By LeoYeAI/agent-master-skills (GitHub) · security · 2,186 stars · scanned at commit 8f88f9a
Comprehensive code security audit toolkit combining OWASP Top 10 vulnerability scanning, dependency analysis, secret detection, SSL/TLS verification, AI Agent security checks, and automated security scoring. Use when auditing codebases, scanning for vulnerabilities, detecting hardcoded secrets, checking OWASP compliance, AI/LLM application security, or preparing for security reviews.
Works with any agent that supports SKILL.md skills.
What this skill can do
Runs commands on your computer
The author does not mention this. Expected for a security skill.
Found in 33 places.
Show 17 more
- skills/code-security-audit/SKILL.md, line 197
grep -rn "query\|execute\|raw\|cursor" --include='*.ts' --include='*.js' --include='*.py' . | \ - skills/code-security-audit/SKILL.md, line 209
grep -rn "exec\|spawn\|system\|popen\|subprocess\|os\.system\|child_process" \ - skills/code-security-audit/SKILL.md, line 227
import { execFile } from 'child_process' - skills/code-security-audit/SKILL.md, line 245
grep -rn "login\|signin\|auth" --include='*.ts' --include='*.js' . | \ - skills/code-security-audit/SKILL.md, line 261
grep -rn "DEBUG\s*=\s*true\|debug:\s*true\|NODE_ENV.*development" \ - skills/code-security-audit/SKILL.md, line 277
curl -sI https://example.com | grep -iE 'strict-transport|content-security|x-frame|x-content-type|referrer-policy|permissions-policy' - skills/code-security-audit/SKILL.md, line 288
npm audit --audit-level=moderate - skills/code-security-audit/SKILL.md, line 304
pip-audit -r requirements.txt - skills/code-security-audit/SKILL.md, line 313
govulncheck ./... - skills/code-security-audit/SKILL.md, line 319
cargo audit - skills/code-security-audit/SKILL.md, line 330
grep -rn "dangerouslySetInnerHTML\|v-html\|innerHTML\|document\.write" \ - skills/code-security-audit/SKILL.md, line 363
grep -rn "npm install.*--ignore-scripts\|pip install.*--no-verify\|curl.*| bash" \ - skills/code-security-audit/SKILL.md, line 379
grep -rn "login\|password\|auth\|delete\|admin" --include='*.ts' --include='*.js' . | \ - skills/code-security-audit/SKILL.md, line 395
grep -rn "fetch\|axios\|request\|http\.get\|urllib\|curl" \ - skills/code-security-audit/SKILL.md, line 412
grep -rn 'AKIA[0-9A-Z]\{16\}' --include='*.{js,ts,py,go,java,rb,env,yml,yaml,json}' . - skills/code-security-audit/SKILL.md, line 439
PATTERNS=( - skills/code-security-audit/SKILL.md, line 475
trivy fs .
and 13 more places
Sends data to these websites: example.com, api.example.com, $domain
The author does not mention this. Expected for a security skill.
Found in 7 places.
Show 4 more
Downloads and installs other software
The author does not mention this.
Found in 13 places.
Show 10 more
- skills/code-security-audit/SKILL.md, line 865
npx audit-ci --moderate - skills/code-security-audit/templates/security-audit.gitlab-ci.yml, line 11
- apt-get update && apt-get install -y python3 python3-pip - skills/code-security-audit/templates/security-audit.gitlab-ci.yml, line 12
- pip3 install pip-audit safety --break-system-packages - skills/code-security-audit/templates/security-audit.gitlab-ci.yml, line 13
- npm install -g audit-ci - skills/code-security-audit/templates/security-audit.gitlab-ci.yml, line 17
- npx audit-ci --moderate || true - skills/code-security-audit/templates/security-audit.gitlab-ci.yml, line 52
- pip install detect-secrets - skills/code-security-audit/templates/security-audit.gitlab-ci.yml, line 71
pip install pip-audit - skills/code-security-audit/templates/security-audit.yml, line 30
pip install pip-audit safety - skills/code-security-audit/templates/security-audit.yml, line 31
npm install -g audit-ci - skills/code-security-audit/templates/security-audit.yml, line 38
run: npx audit-ci --moderate
Reads your saved credentials, such as SSH keys or .env files
This is disclosed by the author in the skill's SKILL.md or README.
Found in 7 places.
Show 4 more
Safer alternatives
Low-risk skills in the same category (security) that look related. Check that one does what you need.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'code-security-audit' ] || [ -L ~/.agents/skills/'code-security-audit' ]; then echo 'A skill folder named code-security-audit already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/LeoYeAI/agent-master-skills' "$d" && git -C "$d" checkout --quiet '8f88f9a0dd5a1075d4f0c7626f9d960844d57575' -- 'skills/code-security-audit' && mkdir -p ~/.agents/skills && cp -R "$d"/'skills/code-security-audit' ~/.agents/skills/'code-security-audit' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'code-security-audit' ~/.claude/skills/'code-security-audit' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for LeoYeAI/agent-master-skills shows the score of its lowest-scoring skill.
[](https://zalavijaysinh.github.io/skilltrust/repos/LeoYeAI/agent-master-skills/)
Score history
| Date | Version | Score |
|---|
| 2026-11-08 | 8f88f9a | 65 |
| 2026-11-07 | 8f88f9a | 65 |