← All skills
security-audit
90 / 100 · Low risk
Fine to try. Some of what it can do is expected: a security skill usually runs scanners and checks websites.
By skillmds/skillmd (GitHub) · security · 143 stars · scanned at commit 4467dd0
Security audit of a codebase — web apps, APIs, services, CLI tools, libraries, daemons, and more. Use when asked to find security bugs, do a security review, audit for vulnerabilities, or pen-test the code. Focuses on exploitable issues with real impact, not theoretical concerns or industry-standard behavior.
Works with any agent that supports SKILL.md skills.
What this skill can do
Connects to the internet
The author does not mention this. Expected for a security skill.
Found in 2 places.
Runs commands on your computer
The author does not mention this. Expected for a security skill.
Found in 13 places.
Show 10 more
- plugins/secure-code-review-pipeline/skills/security-audit/validate-coverage-ledger.test.cjs, line 596
const result = spawnSync(process.execPath, [validatorPath, missingPath], { - plugins/secure-code-review-pipeline/skills/security-audit/validate-coverage-ledger.test.cjs, line 630
const created = spawnSync("mkfifo", [fifoPath], { encoding: "utf8", timeout: CLI_TIMEOUT_MS }); - plugins/secure-code-review-pipeline/skills/security-audit/validate-coverage-ledger.test.cjs, line 633
const result = spawnSync(process.execPath, [validatorPath, fifoPath], { - plugins/secure-code-review-pipeline/skills/security-audit/validate-coverage-ledger.test.cjs, line 654
const result = spawnSync(process.execPath, [validatorPath, symlinkPath], { - plugins/secure-code-review-pipeline/skills/security-audit/validate-findings.test.cjs, line 5
const { spawnSync } = require("node:child_process"); - plugins/secure-code-review-pipeline/skills/security-audit/validate-findings.test.cjs, line 107
return spawnSync(process.execPath, [...nodeArgs, validatorPath, findingsPath], { - plugins/secure-code-review-pipeline/skills/security-audit/validate-findings.test.cjs, line 433
const result = spawnSync(process.execPath, [validatorPath, missingPath], { - plugins/secure-code-review-pipeline/skills/security-audit/validate-findings.test.cjs, line 469
const created = spawnSync("mkfifo", [fifoPath], { encoding: "utf8", timeout: CLI_TIMEOUT_MS }); - plugins/secure-code-review-pipeline/skills/security-audit/validate-findings.test.cjs, line 472
const result = spawnSync(process.execPath, [validatorPath, fifoPath], { - plugins/secure-code-review-pipeline/skills/security-audit/validate-findings.test.cjs, line 493
const result = spawnSync(process.execPath, [validatorPath, symlinkPath], {
Other copies in this repository
skillmds/skillmd has 1 more folder with a skill named security-audit. This page shows the lowest-scoring copy.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'security-audit' ] || [ -L ~/.agents/skills/'security-audit' ]; then echo 'A skill folder named security-audit already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/skillmds/skillmd' "$d" && git -C "$d" checkout --quiet '4467dd0debe8f189ba78142ee57ec42aea84e623' -- 'plugins/secure-code-review-pipeline/skills/security-audit' && mkdir -p ~/.agents/skills && cp -R "$d"/'plugins/secure-code-review-pipeline/skills/security-audit' ~/.agents/skills/'security-audit' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'security-audit' ~/.claude/skills/'security-audit' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for skillmds/skillmd shows the score of its lowest-scoring skill.

[](https://zalavijaysinh.github.io/skilltrust/repos/skillmds/skillmd/)
Score history
| Date | Version | Score |
|---|
| 2026-11-09 | 4467dd0 | 90 |
| 2026-11-07 | 1b0ba86 | 90 |