agentsclimarketplace
Sign in

Security audit

Skill wchen02/cursor-agent-learning/.cursor/skills/security-audit

Run a security audit (dependencies, secrets, auth, inputs). Use when the user asks for a security review, dependency audit, or to check for vulnerabilities and hardcoded secrets.From its SKILL.md

Install
npx -y skills add wchen02/cursor-agent-learning --skill security-audit

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

2 things to look at

  • no licenseNo license file was found in the repository. Code published without one is not open source by default, so using it at work is a question for whoever answers licensing questions where you are.
  • 1 stars1 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

SKILL.md

1.7 KB, 350 tokens by cl100k_base, as published. Nobody here has run it

Security Audit

When the user asks for a security audit or review, follow this workflow.

1. Determine scope

  • Full audit → Do all steps below (dependencies, secrets, auth, inputs, report).
  • Quick check (e.g. before PR) → Run only Secrets and Dependencies from reference.md.

Ask or infer from the request; if unclear, do a quick check and offer to run a full audit.

2. Full audit steps

  1. Dependencies — Check for known vulnerabilities (e.g. npm audit, pip audit, or project-equivalent). List high/critical and suggest upgrades or mitigations.
  2. Secrets — Search for hardcoded secrets, API keys, passwords. See reference.md for patterns and paths to exclude.
  3. Auth and authorization — Identify auth boundaries; note any endpoints that should require auth but don’t, or missing role checks.
  4. Inputs — Note places that accept user/s external input (forms, API params, file upload). Ensure validation and sanitization are present; flag SQL/command injection or XSS risks where relevant.
  5. Report — Summarize findings using the severity format in examples.md: Critical / High / Medium / Low, with file/line or area and a short recommendation.

3. Output format

Use the same severity labels and structure as in examples.md so the report is consistent and actionable.

Additional resources

What ships with it: 2 files

3.4 KB alongside SKILL.md

Keep looking

Skills are one crate of 326,871. Ordering is by how many stacks a row turns up in, so the top of any crate is what has actually been picked rather than what has the most stars.