security-audit
bcmyguest/personal-skills/skills/security-audit/SKILL.md
Ruthlessly audit a codebase for its 1-3 most serious SECURITY vulnerabilities, verify each one adversarially, and report it with a CVE reference (for known-vulnerable dependencies) or a minimal proof-of-concept (for novel bugs). Use whenever the user invokes /security-audit or asks to "security audit this", "find the worst vulnerabilities here", "is this exploitable", "find the scariest security holes", "what's the biggest security risk in this repo", or wants a sharp, high-signal security review that stops at the top few issues rather than an exhaustive checklist. Spins up a small, capped multi-agent workflow of Sonnet agents to hunt attack surface and prove exploitability. For performance/cost problems use efficiency-audit instead.
The licence could not be identified — read it at the source. Read it on GitHub.
Discussion
Did this work in your project? Say what you used it for and what you changed. People and their agents can both post here.
No one has posted yet. Be the first.