security-audit is agent-read markdown (skill) from maxmiksa/auto-company: Use when reviewing code security, auditing dependencies for CVEs, checking configuration or secret security, assessing authentication and authorization patterns, identifying OWASP vulnerabilities (injection, XSS, CSRF), or addressing security concerns about implementations..
Indexed from public GitHub and served as immutable, content-addressed versions. Install it pinned to an exact SHA-256 with the mdr CLI, and every file is verified against the hash recorded here before it reaches your agent. The deterministic audit below grades the latest version, and the same file always earns the same grade.
What the file says
# Security Audit
Systematic security review for application code, dependencies, and configuration.
**Not a replacement for professional penetration testing.** Identifies common vulnerabilities within scope of code review.
## Audit Types
| Type | Focus | When to Use |
|------|-------|-------------|
| Code Review | OWASP Top 10, injection, auth | New features, PRs, suspicious code |
| Dependency | CVEs, outdated packages | Before deploy, periodic, CI/CD |
| Configuration | Secrets, permissions, hardening | Infrastructure changes, new envs |
| Architecture | Attack surface, data flow | Design phase, major refactors |
| API Security | Auth, authz, rate limiting | New endpoints, public APIs |
## When NOT to Use
- **Designing new auth flows** — Use `api-design` for designing OAuth2/JWT endpoints from scratch
- **Performance issues** — Use `performance-optimization` even if caused by auth overhead
- **CI/CD pipeline security** — Use `ci-cd` for pipeline hardening (secret management, permissions)
## Key Principles
- **Scope first** — Define audit area, depth, and constraints before scanning
…
Pin to a label to follow the author's releases, or to a sha256 to freeze the exact bytes forever. Either way the resolved hash is written to mdr.lock, and mdr install reproduces it on any machine.
GET https://markdownregistry.com/api/v1/artifacts/art_o7zazgtwymbz2e3v
GET https://markdownregistry.com/api/v1/resolve?ref=maxmiksa/auto-company/security-audit
GET https://markdownregistry.com/api/v1/blob/49593d464763ec4b8051e3a21ed86fb81f79cf949083a123567fe9e258c14536
Your agent does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
maxmiksa/auto-company · .claude/skills/agent-browser/SKILL.md · Browser automation CLI for AI agents. Use when the user needs to interact with websites, including navigating pages…
maxmiksa/auto-company · .claude/skills/code-review-security/SKILL.md · Security-focused code review checklist and automated scanning patterns. Use when reviewing pull requests for security…
maxmiksa/auto-company · .claude/skills/community-led-growth/SKILL.md · Expert in community-led growth (CLG) - leveraging user communities to drive acquisition, retention, and expansion…
maxmiksa/auto-company · .claude/skills/competitive-intelligence-analyst/SKILL.md · Use this skill when users need to analyze competitors, monitor market movements, benchmark features/pricing, identify…
maxmiksa/auto-company · .claude/skills/content-strategy/SKILL.md · When the user wants to plan a content strategy, decide what content to create, or figure out what topics to cover. Also…
maxmiksa/auto-company · .claude/skills/deep-reading-analyst/SKILL.md · Comprehensive framework for deep analysis of articles, papers, and long-form content using 10+ thinking models (SCQA…
maxmiksa/auto-company · .claude/skills/deep-research/SKILL.md · Conduct enterprise-grade research with multi-source synthesis, citation tracking, and verification. Use when user needs…
maxmiksa/auto-company · .claude/skills/email-sequence/SKILL.md · When the user wants to create or optimize an email sequence, drip campaign, automated email flow, or lifecycle email…
maxmiksa/auto-company · .claude/skills/financial-unit-economics/SKILL.md · Use when evaluating business model viability, analyzing profitability per customer/product/transaction, validating…
jellydn/my-ai-tools · configs/amp/plugins/my-ai-tools-skills/skills/security-audit/SKILL.md · Use when reviewing code for security vulnerabilities, hardening an application, or deriving security requirements from…
