security-audit-skill
security-audit-skill is a skill that makes a coding agent run multi-phase security audits of a codebase and write verified findings for developers reviewing their own code.
What it is good for
- Finding security vulnerabilities in a codebase before release
- Checking code for security flaws with independent verification
- Producing a written security audit report from source code
- Tracking audit coverage across repeated review runs
At a glance
- Who it is for
- Setup
- Guided command-line setup
Level 4 of 5. You copy and paste commands into a terminal by following the instructions. Comfortable territory for vibe coders.
- Cost
- Free and open source
- Type
- Skill or plugin
- Tasks
- Works with
- Skills CLI
Momentum
- Rank this week
- #29
- Best rank
- #4 week 43, 2026
- Stars gained last week
- +9,423
- GitHub stars
- 56,778
GitHub numbers as of Nov 2, 2026. Updated weekly.
Ranking history
Official links
Setup steps are on the official pages. We do not repeat them here, since they change.
Questions
- Is security-audit-skill free?
- Yes. It is free and open source (MIT license).
- Do I need to know how to code to use security-audit-skill?
- You do not need to write code, but setup means copying and pasting commands into a terminal by following its instructions.
- What does security-audit-skill work with?
- According to its own documentation, it works with Skills CLI.
- What is security-audit-skill good for?
- Finding security vulnerabilities in a codebase before release, checking code for security flaws with independent verification, producing a written security audit report from source code, and tracking audit coverage across repeated review runs.
Similar agents
- skills
Skills is a set of small agent instruction files that help coding agents like Claude Code and Codex build real software without losing the developer's control.
- gstack
gstack is a set of 23 slash-command skills that turn Claude Code into a virtual engineering team for solo founders and tech leads.
- Agent Skills
Agent Skills is a set of skill files that make AI coding agents follow senior engineering workflows for building software.
- Archify
Archify is a skill that turns an idea, plan, or codebase into an interactive diagram for people who need to understand or share a system.
- Claude Code Game Studios
Claude Code Game Studios is a set of 49 AI agents and 74 workflow skills that gives a solo game developer studio-style structure for building games with Claude Code.
- elephant-goldfish-model
Elephant-goldfish-model is a skill that helps teams plan software features with AI agents and stress-test the design before coding.