YangKuoshih/security-audit

Universal security scanning skill for AI agents - finds hardcoded secrets, API keys, and vulnerabilities in any codebase. 60 regex rules (46 GitLeaks-informed secret patterns, 14 OWASP Top 10 checks) plus 15 dangerous-file checks. Markdown/SARIF/JSON reports. Works across Claude Code, Cursor, Windsurf, and any agentic platform.

5Stars on the repository
2Mods indexed here, across every type
9d agoLast push, which is what freshness is scored on
Apache-2.0Licence, which decides whether bodies are shown

security-audit

01

YangKuoshih/security-audit

Plugin Claude Code

Bundles 1 skill · 95 tokens together

Scan codebases for hardcoded secrets, credentials, API keys, and common security vulnerabilities.

not rated 5 changed 24d ago A tokens not measured original Apache-2.0