From 8d72ae992e73506966ab69094bea4cb8735a9386 Mon Sep 17 00:00:00 2001 From: Andy Dixon <7983876+andydixon@users.noreply.github.com> Date: Thu, 16 Jul 2026 09:26:45 +0100 Subject: [PATCH] Update SKILL.md --- securityaudit/SKILL.md | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/securityaudit/SKILL.md b/securityaudit/SKILL.md index 9cbb6a9..b70750e 100644 --- a/securityaudit/SKILL.md +++ b/securityaudit/SKILL.md @@ -1,8 +1,6 @@ --- name: securityaudit -description: >- - Run a deep, paranoid, evidence-based security audit of a software project, create security and functionality-next-step reports under audits/, or fix findings with --fix. Use for securityaudit/securityaudit --fix, secure code review, blackhat-style adversarial review, threat modelling, cryptography and key-management review (including post-quantum readiness), in-memory secret handling and credential hygiene review, memory-safety review, dependency/configuration review, denial-of-service and resource-exhaustion analysis, frontend HTML/JavaScript robustness review, project-wide appsec assessment, code-quality hardening, and repair of confirmed security, DoS, frontend, robustness, or maintainability findings. Normal mode audits source, tests, build/deploy files, dependencies, CI/CD, auth/authz, input handling, cryptography, secret storage and lifetime (at rest, in transit, and in memory), browser behavior, data protection, infrastructure, operations, DoS and abuse vectors, memory/CPU s -afety, and fragile code without changing app files except git bootstrap if needed and reports. Fix mode safely improves confirmed issues in git, preserving functionality, testing, and committing successful fixes. +description: Run a deep, evidence-based security audit of a software project, or repair confirmed findings when invoked with --fix. Use for securityaudit, securityaudit --fix, secure code review, adversarial or blackhat-style assessment, threat modelling, cryptography, credential hygiene, memory safety, dependency and configuration review, denial-of-service analysis, frontend robustness, application security, and security-focused code hardening. Normal mode writes audit and functionality reports under audits/ without changing application code. Fix mode applies evidence-backed repairs in Git, runs appropriate tests, and commits successful fixes while preserving existing functionality. --- # Security Audit