How do I install Security Auditor?

Install Security Auditor with a single command: npx mdskills install wshobson/security-auditor. This downloads the skill files into your project and your AI agent picks them up automatically.

What platforms support Security Auditor?

Security Auditor works with Claude Code. Skills use the open SKILL.md format which is compatible with any AI coding agent that reads markdown instructions.

← Back to subagents

Security Auditor

Name: Security Auditor: AI Agent Skill
Brand: wshobson
Availability: InStock
Rating: 3.6 (1 reviews)
Author: wshobson

Verified

Reviews code for OWASP-style vulnerabilities: injection, auth flaws, secret leaks, unsafe deserialization. Use before merging any code that touches auth, inputs, or external systems.

7.8advisor390popularityby wshobson

npx mdskills install wshobson/security-auditor

Kubernetes Architect

Designs Kubernetes clusters, ingress topology, RBAC, and workload placement. Use for greenfield k8s setups or when scaling past 10 services on a single cluster.

Performance Engineer

Profiles hot paths, spots N+1 queries, suggests caching layers, and fixes render bottlenecks. Use when a page or endpoint is slow and root cause is unknown.

Frontend Developer

Ships React/Next.js UI components with accessibility, state management, and performance baked in. Use when building or refactoring UI code.

Cloud Architect

Designs multi-region cloud topologies on AWS/GCP/Azure — VPCs, load balancers, IAM, cost tradeoffs. Use when moving off a single-region monolith or planning a migration.

Sub-agent details

When to use: Before merging any code that touches auth, user inputs, or external systems
Hosts: Claude Code
Tools allowed: ReadGrepGlob

Are you @wshobson? Sign in with GitHub to claim this listing.

Skill Advisor7.8

Comprehensive security auditor with clear OWASP-aligned methodology and structured output format

+Covers complete spectrum of OWASP Top 10 and modern API security concerns
+Provides structured severity-based output with actionable remediation steps
+Includes specific examples like JWT validation, RBAC, and supply chain risks
-Lacks trigger conditions or workflow integration guidance for when to invoke
-Could benefit from examples of actual findings and remediation code snippets

Fork Lineage

No forks yet. Be the first to fork and customize this skill.

Visual fork tree and fork list coming soon.

Kubernetes Architect

Subagent

Designs Kubernetes clusters, ingress topology, RBAC, and workload placement. Use for greenfield k8s setups or when scaling past 10 services on a single cluster.

8.7435by wshobson

Performance Engineer

Subagent

Profiles hot paths, spots N+1 queries, suggests caching layers, and fixes render bottlenecks. Use when a page or endpoint is slow and root cause is unknown.

8.2410by wshobson

Frontend Developer

Subagent

Ships React/Next.js UI components with accessibility, state management, and performance baked in. Use when building or refactoring UI code.

8.2410by wshobson

Cloud Architect

Subagent

Designs multi-region cloud topologies on AWS/GCP/Azure — VPCs, load balancers, IAM, cost tradeoffs. Use when moving off a single-region monolith or planning a migration.

7.8390by wshobson

TDD Orchestrator

Subagent

Drives strict red-green-refactor: writes a failing test, runs it, implements just enough to pass, refactors. Use when you want to enforce TDD on a new feature.

7.8390by wshobson

Test Automator

Subagent

Writes unit, integration, and e2e tests. Picks the right framework, structures the test suite, and generates fixtures. Use when a feature ships without tests.

7.8390by wshobson

Security Auditor

Sub-agent details

Fork Lineage

Related

Kubernetes Architect

Performance Engineer

Frontend Developer

Cloud Architect

TDD Orchestrator

Test Automator