Security Audit
- 132 installs
- 67k repo stars
- Updated August 4, 2026
- ruvnet/claude-flow
This is a copy of security-audit by ruvnet - installs and ranking accrue to the original listing.
Use security-audit for development tasks
About
security-audit: A skill for development. This provides functionality for development workflows.
- security-audit
Security Audit by the numbers
- 132 all-time installs (skills.sh)
- Data as of Aug 5, 2026 (Skillselion catalog sync)
npx skills add https://github.com/ruvnet/claude-flow --skill security-auditAdd your badge
Show developers this skill is listed on Skillselion. Paste this into your README.
| Installs | 132 |
|---|---|
| repo stars | ★ 67k |
| Last updated | August 4, 2026 |
| Repository | ruvnet/claude-flow ↗ |
What it does
Use security-audit for development tasks
Files
Security Audit Skill
Purpose
Comprehensive security scanning and vulnerability detection. Includes input validation, path traversal prevention, CVE detection, and secure coding pattern enforcement.
When to Trigger
- authentication implementation
- authorization logic
- payment processing
- user data handling
- API endpoint creation
- file upload handling
- database queries
- external API integration
When to Skip
- read-only operations on public data
- internal development tooling
- static documentation
- styling changes
Commands
Full Security Scan
Run comprehensive security analysis on the codebase
npx @claude-flow/cli security scan --depth fullExample:
npx @claude-flow/cli security scan --depth full --output security-report.jsonInput Validation Check
Check for input validation issues
npx @claude-flow/cli security scan --check input-validationExample:
npx @claude-flow/cli security scan --check input-validation --path ./src/apiPath Traversal Check
Check for path traversal vulnerabilities
npx @claude-flow/cli security scan --check path-traversalSQL Injection Check
Check for SQL injection vulnerabilities
npx @claude-flow/cli security scan --check sql-injectionXSS Check
Check for cross-site scripting vulnerabilities
npx @claude-flow/cli security scan --check xssCVE Scan
Scan dependencies for known CVEs
npx @claude-flow/cli security cve --scanExample:
npx @claude-flow/cli security cve --scan --severity highSecurity Audit Report
Generate full security audit report
npx @claude-flow/cli security audit --reportExample:
npx @claude-flow/cli security audit --report --format markdown --output SECURITY.mdThreat Modeling
Run threat modeling analysis
npx @claude-flow/cli security threats --analyzeValidate Secrets
Check for hardcoded secrets
npx @claude-flow/cli security validate --check secretsScripts
| Script | Path | Description |
|---|---|---|
security-scan | .agents/scripts/security-scan.sh | Run full security scan pipeline |
cve-remediate | .agents/scripts/cve-remediate.sh | Auto-remediate known CVEs |
References
| Document | Path | Description |
|---|---|---|
Security Checklist | docs/security-checklist.md | Security review checklist |
OWASP Guide | docs/owasp-top10.md | OWASP Top 10 mitigation guide |
Best Practices
1. Check memory for existing patterns before starting 2. Use hierarchical topology for coordination 3. Store successful patterns after completion 4. Document any new learnings
#!/bin/bash
# Security Audit - CVE Remediation Script
# Auto-remediate known CVEs
set -e
echo "Scanning for CVEs..."
npx @claude-flow/cli security cve --scan --severity high
echo "Attempting auto-remediation..."
npm audit fix
echo "Re-scanning after remediation..."
npx @claude-flow/cli security cve --scan
echo "CVE remediation complete"
#!/bin/bash
# Security Audit - Full Scan Script
# Run comprehensive security scan pipeline
set -e
echo "Running full security scan..."
# Input validation
echo "Checking input validation..."
npx @claude-flow/cli security scan --check input-validation
# Path traversal
echo "Checking path traversal..."
npx @claude-flow/cli security scan --check path-traversal
# SQL injection
echo "Checking SQL injection..."
npx @claude-flow/cli security scan --check sql-injection
# XSS
echo "Checking XSS..."
npx @claude-flow/cli security scan --check xss
# Secrets
echo "Checking for hardcoded secrets..."
npx @claude-flow/cli security validate --check secrets
# CVE scan
echo "Scanning dependencies for CVEs..."
npx @claude-flow/cli security cve --scan
echo "Security scan complete"
Related skills
Lark Openapi ExplorerInstantly explore, test, and generate calls against the full Lark (Feishu) OpenAPI surface without leaving their agent workflow.493k
Lark EventConsume real-time events from Lark/Feishu as structured NDJSON streams inside AI agent workflows.387k16kLark Openapi ExplorerWhen an existing Lark/Feishu skill or CLI command cannot fulfill a specific requirement and they need to discover and invoke the exact native OpenAPI endpoint.386k16k
Just ScrapeQuickly search, crawl, extract structured JSON, or monitor web pages without writing custom scraping code.245k41Lark AppsQuery the current visibility and permission scope of a Lark (Feishu) app without writing HTTP client code.235k16k
Design An InterfaceGenerate multiple radically different interface or API designs in parallel before committing to one.188k198k