Audit a codebase against the OWASP Top 10 plus secret-leak and authorisation checks, and verify each finding is reachable before reporting it.
Already have an account?
Install this skill from your terminal in one command.
npx promptdock@latest install Klickrehan/security-audit-owaspA reachability-first security pass. The hard part of an audit is not spotting patterns — grep does that — it is proving a pattern is actually exploitable. Anything that cannot be traced from an attacker-controlled input to the sink is reported as hardening, not as a vulnerability
Sign in to read the full skill
SKILL.md and every file in this package are free — they open as soon as you have an account.
Review an AI-enabled workflow before deployment. Focus on concrete failure paths, permissions, verification, recoverability, and human authorization.
Read a project's actual entry points, config and scripts, then write a README whose install and usage steps can be executed verbatim.
Diagnose why an app runs locally but not when deployed: every variable the code reads, cross-checked against each environment, with fail-soft keys called out.
Document an HTTP API from its handlers — real params, real response shapes, real error codes — and flag every place the existing spec has drifted from the code.