SkillTrust

← All skills

security-audit

90 / 100 · Low risk

Fine to try. Some of what it can do is expected: a security skill usually runs scanners and checks websites.

By skillmds/skillmd (GitHub) · security · 143 stars · scanned at commit 4467dd0

Security audit of a codebase — web apps, APIs, services, CLI tools, libraries, daemons, and more. Use when asked to find security bugs, do a security review, audit for vulnerabilities, or pen-test the code. Focuses on exploitable issues with real impact, not theoretical concerns or industry-standard behavior.

Works with any agent that supports SKILL.md skills.

What this skill can do

Connects to the internet

The author does not mention this. Expected for a security skill.

Found in 2 places.

Runs commands on your computer

The author does not mention this. Expected for a security skill.

Found in 13 places.

Show 10 more

Other copies in this repository

skillmds/skillmd has 1 more folder with a skill named security-audit. This page shows the lowest-scoring copy.

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'security-audit' ] || [ -L ~/.agents/skills/'security-audit' ]; then echo 'A skill folder named security-audit already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/skillmds/skillmd' "$d" && git -C "$d" checkout --quiet '4467dd0debe8f189ba78142ee57ec42aea84e623' -- 'plugins/secure-code-review-pipeline/skills/security-audit' && mkdir -p ~/.agents/skills && cp -R "$d"/'plugins/secure-code-review-pipeline/skills/security-audit' ~/.agents/skills/'security-audit' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'security-audit' ~/.claude/skills/'security-audit' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for skillmds/skillmd shows the score of its lowest-scoring skill.

SkillTrust badge for skillmds/skillmd

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/skillmds/skillmd.svg)](https://zalavijaysinh.github.io/skilltrust/repos/skillmds/skillmd/)

Score history

DateVersionScore
2026-11-094467dd090
2026-11-071b0ba8690