From security-code-audit
This skill should be used when the user asks to "full security audit", "complete codebase review", "security scan entire project", "comprehensive security analysis", or needs full coverage of all code files.
How this skill is triggered — by the user, by Claude, or both
Slash command
/security-code-audit:security-code-audit-review-fullThis skill is limited to the following tools:
The summary Claude sees in its skill listing — used to decide when to auto-load this skill
Perform comprehensive security review of the entire codebase.
Perform comprehensive security review of the entire codebase.
Execute complete security audits covering all code files for initial security assessments, compliance reviews, or comprehensive vulnerability discovery.
grepai status
find . -type f \( \
-name "*.py" -o \
-name "*.js" -o -name "*.ts" -o -name "*.jsx" -o -name "*.tsx" -o \
-name "*.go" -o \
-name "*.rs" -o \
-name "*.c" -o -name "*.h" -o -name "*.cpp" -o -name "*.cc" -o \
-name "*.sol" -o \
-name "*.tf" -o \
-name "*.php" \
\) -not -path "*/node_modules/*" -not -path "*/.git/*" -not -path "*/vendor/*"
grepai search "authentication and authorization" --json --compact
grepai search "user input handling and validation" --json --compact
grepai search "database queries and SQL operations" --json --compact
grepai search "file system operations" --json --compact
grepai search "external API calls and network requests" --json --compact
grepai search "cryptography and secrets" --json --compact
grepai search "command execution" --json --compact
Combine findings into comprehensive report with summary statistics.
{
"reviews": [...],
"summary": {
"total_files": 50,
"files_with_issues": 5,
"total_issues": 12,
"by_severity": {
"CRITICAL": 1,
"HIGH": 3,
"MEDIUM": 5,
"LOW": 3
}
}
}
See ../security-code-audit-review/references/ for:
language-checks.md - Security checks per languagecwe-reference.md - CWE IDs and severity levelsoutput-schema.md - JSON format validationexamples.md - Completed review examplescontext: fork for parallel processingProvides CDSS development patterns for drug interaction checking, dose validation, clinical scoring (NEWS2, qSOFA), and alert classification integrated into EMR workflows.
npx claudepluginhub mfakbar127/agent-skills --plugin security-code-audit