security-auditor
Implements security best practices including input sanitization, rate limiting, and CORS.
Install
mkdir -p .claude/skills/security-auditor-flavioprogramador && curl -L -o skill.zip "https://agentskills.codes/api/skills/download/15784" && unzip -o skill.zip -d .claude/skills/security-auditor-flavioprogramador && rm skill.zipInstalls to .claude/skills/security-auditor-flavioprogramador
Activation
This is the description your AI agent reads to decide when to run this skill — the better it matches your request, the more reliably it fires.
Security auditing, OWASP Top 10 vulnerabilities mitigation, input sanitization, rate limiting, and CORS configuration.Key capabilities
- →Mitigate OWASP Top 10 vulnerabilities
- →Prevent SQL Injection using ORMs or prepared parameters
- →Prevent XSS by sanitizing user input on the backend
- →Configure restricted CORS policies
- →Implement rate limiting on sensitive routes
- →Review code for security vulnerabilities
How it works
The skill provides guidance on security rules, focusing on mitigating OWASP Top 10 vulnerabilities like SQL Injection and XSS, and configuring CORS and rate limiting. It recommends specific practices for secure development.
Inputs & outputs
When to use security-auditor
- →Running security audits
- →Configuring CORS policies
- →Implementing rate limiting
About this skill
🛡️ Security Auditor Skill
Security auditing, OWASP Top 10 vulnerabilities mitigation, input sanitization, rate limiting, and CORS configuration.
🔒 Regras de Segurança da Aplicação
-
Mitigação de OWASP Top 10:
- SQL Injection: Sempre use ORMs (como SQLAlchemy) ou parâmetros preparados. Nunca concatene variáveis em strings SQL brutas.
- XSS (Cross-Site Scripting): Higienize todas as entradas do usuário no backend e utilize o motor de templates seguro do frontend (Angular já protege nativamente contra inserções inseguras de HTML, mas evite usar
bypassSecurityTrustHtmla menos que estritamente validado).
-
CORS e Rate Limiting:
- Configure políticas de CORS restritas (permita apenas as origens específicas do frontend em produção).
- Implemente middlewares de limitação de requisições (
Rate Limiting) em rotas sensíveis como login e processamento de PDFs para evitar ataques de força bruta ou negação de serviço (DoS).
When not to use it
- →When the application does not require security auditing
- →When the focus is not on OWASP Top 10 vulnerabilities or specific security measures like CORS/rate limiting
Limitations
- →Focuses on OWASP Top 10 vulnerabilities
- →Recommendations are specific to SQL Injection, XSS, CORS, and Rate Limiting
- →Assumes Angular's native protection against unsafe HTML insertions
How it compares
This skill provides targeted guidance on specific security vulnerabilities and mitigation strategies, unlike a general security review that might not focus on these particular areas.
Compared to similar skills
security-auditor side by side with the closest alternatives in the catalog.
| Skill | Installs | Updated | Safety | Difficulty |
|---|---|---|---|---|
| security-auditor (this skill) | 0 | 1mo | No flags | Intermediate |
| security-header-generator | 5 | 9mo | Caution | Intermediate |
| backend-security-coder | 24 | 4mo | No flags | Intermediate |
| api-security-best-practices | 15 | 6mo | Review | Intermediate |
Try saying
Example prompts that trigger this skill in your AI assistant.
More by FlavioProgramador
View all by FlavioProgramador →You might also like
security-header-generator
Dexploarer
Generates security HTTP headers (CSP, HSTS, CORS, etc.) for web applications to prevent common attacks. Use when user asks to "add security headers", "setup CSP", "configure CORS", "secure headers", or "HSTS setup".
backend-security-coder
sickn33
Expert in secure backend coding practices specializing in input validation, authentication, and API security. Use PROACTIVELY for backend security implementations or security code reviews.
api-security-best-practices
davila7
Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities
springboot-security
affaan-m
Spring Security best practices for authn/authz, validation, CSRF, secrets, headers, rate limiting, and dependency security in Java Spring Boot services.
windows-kernel-security
gmh5225
Guide for Windows kernel security research including driver development, system callbacks, security features, and kernel exploitation. Use this skill when working with Windows drivers, PatchGuard, DSE, or kernel-level security mechanisms.
django-security
affaan-m
Django security best practices, authentication, authorization, CSRF protection, SQL injection prevention, XSS prevention, and secure deployment configurations.