Skip to content

netresearch/security-audit

v2.11.8(MIT AND CC-BY-SA-4.0)

Security audit patterns (OWASP Top 10, CWE Top 25 2025, CVSS v4.0) and GitHub project security checks for any project. Deep automated PHP/TYPO3 scanning with 80+ checkpoints, 41 reference guides, PreToolUse warnings. By Netresearch.

GitHub

allowed-tools

  • Bash(gh:*)1 skill
  • Bash(grep:*)1 skill
  • Bash(jq:*)1 skill
  • Glob1 skill
  • Grep1 skill
  • Read1 skill

scripts

  • security-audit
  • scripts/github-security-audit.sh
  • scripts/scanners/android.sh
  • scripts/scanners/aws.sh
  • scripts/scanners/common.sh
  • scripts/scanners/csharp.sh
  • scripts/scanners/drupal.sh
  • scripts/scanners/go.sh
  • scripts/scanners/ios.sh
  • scripts/scanners/java.sh
  • 9 more
    • scripts/scanners/javascript.sh
    • scripts/scanners/joomla.sh
    • scripts/scanners/nodejs.sh
    • scripts/scanners/php.sh
    • scripts/scanners/python.sh
    • scripts/scanners/secrets.sh
    • scripts/scanners/wordpress.sh
    • scripts/security-audit-dispatcher.sh
    • scripts/security-audit.sh
plugin.json
name
security-audit
version
2.11.8
description
Security audit patterns (OWASP Top 10, CWE Top 25 2025, CVSS v4.0) and GitHub project security checks for any project. Deep automated PHP/TYPO3 scanning with 80+ checkpoints, 41 reference guides, PreToolUse warnings. By Netresearch.
author
Netresearch DTT GmbHhttps://www.netresearch.de
license
(MIT AND CC-BY-SA-4.0)
repository
https://github.com/netresearch/security-audit-skill

What else this package ships

These files come with the package and this site does not publish them. They are listed so you know what is there before you install it.

  • 18shell scripts
  • evals.json
  • checkpoints.yaml
View on GitHub