Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →omnigent-ai/security-audit
Audit a codebase or directory for security issues (hardcoded secrets, injection, unsafe deserialization, weak crypto, authz gaps) and produce a structured findings report.
Passed 0 of 13 test cases with the skill, and 13 of 13 without it.
1 fixed1 passed either way12 still failing8 broke
Tokens, turns and time describe resource use, not a dollar price.
The instructions your model reads when the skill loads.
Identify what to audit (a directory, a diff, a module). Gather it yourself with sys_os_* / git — this is plumbing, not investigation.
Hand the scanner the scope; it reads source, manifests, history and returns per-finding evidence. Do NOT sprawl across the repo yourself.
For each finding:
### <Severity>: <short title>
- **Severity**: Critical | High | Medium | Low | Info
- **Location**: file:line
- **Recommendation**: <fix guidance — describe it, never apply it>
- **Confidence**: high | medium | low
Route the draft through the reviewer (codex, different vendor) to confirm true positives and drop false positives. Fold in its verdicts.
Present the final report. You REPORT; you never edit, patch, or fix code.
test cases passed, vs 13 / 13 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.