security-audit

github:netresearch/security-audit-skill · first committed 2026-01-06 · source · badge

Agent Skill: Security audit patterns for PHP/OWASP. Use when conducting security assessments, identifying vulnerabilities (XXE, SQL injection, XSS), or CVSS scoring. By Netresearch.

Skill Health: not yet scored

Listed, not yet scored. This skill has no public model test yet. It is in the scoring queue; submitted skills go first, then the most-installed.

Version history

67 commits to this file on GitHub (newest first).

2026-10-28 · commit 71ab9dd · docs: bound security guarantees to their verification evidence
2026-10-25 · commit 6a3801e · fix: run the Python scripts through uv on Python 3.11 or later
2026-10-23 · commit 6731d0c · chore(release): v2.11.9
2026-10-07 · commit 048a344 · chore(release): v2.11.8
2026-10-07 · commit 7347754 · chore(release): v2.11.7
2026-10-01 · commit d3006ff · chore: add SPDX licence and copyright notices to source files
2026-09-27 · commit a87a477 · chore(release): v2.11.6
2026-09-24 · commit 7b1dc2e · docs(references): add SSH forced-command allowlist bypass pattern
2026-09-23 · commit 8466f67 · chore(release): v2.11.5
2026-09-16 · commit b60fc7f · chore(release): v2.11.4
2026-09-11 · commit d71da07 · chore(release): v2.11.3
2026-09-03 · commit ef11e66 · chore(release): v2.11.2
2026-08-13 · commit 7cb7bda · chore: release v2.11.1
2026-08-08 · commit 49a5912 · chore(release): v2.11.0
2026-08-03 · commit cd1fad8 · chore(release): v2.10.6
2026-07-31 · commit b7e6fe5 · docs(references): add indistinguishability-defences
2026-07-13 · commit 780cf2d · chore(release): v2.10.5
2026-07-12 · commit 4d7d8bd · chore(references): retire off-stack cloud/language/framework references
2026-07-11 · commit fa748b0 · chore(skill): drop TYPO3-version specifics from description
2026-07-11 · commit 951e198 · chore(skill): cut SKILL.md Quick Patterns block
2026-07-11 · commit 86401cb · chore(references): remove stale cve-database.md CVE snapshot
2026-07-11 · commit 2f23e53 · chore(references): retire off-stack framework and language references
2026-07-05 · commit ec16509 · chore(release): v2.10.4
2026-06-24 · commit 2cce4d2 · chore(release): v2.10.3
2026-06-18 · commit 277fd73 · chore(release): v2.10.2
2026-06-09 · commit 67c5eb7 · chore(release): v2.10.1
2026-06-02 · commit 78e9729 · docs(security-audit): add pre-publication git-history hygiene reference
2026-06-02 · commit fb0671d · docs(security-audit): keep SKILL.md within 500-word limit
2026-05-28 · commit fef5964 · chore(release): v2.10.0
2026-05-21 · commit 2ee4561 · feat(references): add security-invariants
2026-05-15 · commit f75d83b · chore(release): v2.9.0
2026-04-25 · commit 22733f9 · chore: release v2.8.1
2026-04-22 · commit dc9382e · chore: release v2.8.0
2026-04-21 · commit 54ed545 · feat(v14): TYPO3 v14.3 LTS security audit checklist
2026-04-19 · commit b7593be · chore: release v2.7.0
2026-04-19 · commit d563ed0 · feat(references): import cve-database.md (CVE→checkpoint catalog)
2026-04-19 · commit 84b17bd · feat(scanner): multi-language scanner dispatcher + 309 net-new checkpoints
2026-04-19 · commit 05d8dc1 · fix(references): round-3 review fixes
2026-04-19 · commit e5c1fef · fix(references): address review feedback + skill-creator self-audit
2026-04-19 · commit a0588d8 · feat(references): split framework-security.md + add Fluid/TypoScript + index Tier 2
2026-04-19 · commit 57895e7 · fix(skill): restore opengrep mention dropped during word-count trim
2026-04-19 · commit 0f1d450 · fix(references): correct llm-security.md audit recipes + SKILL.md triggers
2026-04-19 · commit 093a02c · fix(skill): trim SKILL.md to ≤500 words for validate-skill.sh
2026-04-19 · commit 57c6797 · fix(skill): address review feedback on SKILL.md
2026-04-19 · commit c27a139 · feat(skill): surface cloud/IaC/API/frontend/LLM refs in SKILL.md index
2026-04-18 · commit c9a83c4 · feat(security-audit): document opengrep as OSS Semgrep alternative
2026-04-01 · commit ba74b0e · chore: release v2.6.0
2026-03-31 · commit b25ad54 · fix: improve skill coverage for Docker, randomness, and cross-platform grep
2026-03-30 · commit 7779200 · fix: trim SKILL.md to stay within 500-word limit, move details to reference
2026-03-30 · commit c62b97b · feat: add GitHub Actions injection and dependency vulnerability checkpoints
2026-03-29 · commit 2fdadff · chore: bump plugin.json version to 2.5.0
2026-03-28 · commit 745d2b8 · feat: add error message sanitization checks (CWE-209)
2026-03-27 · commit 5ce6c68 · fix: trim SKILL.md to under 500 words (was 511)
2026-03-27 · commit fa3a930 · feat: add CSP, image processing, lock handling, and error suppression checkpoints
2026-03-21 · commit 70782b0 · fix: sync SKILL.md version to 2.3.0
2026-03-21 · commit e86c533 · feat: add supply chain incident response reference
2026-03-18 · commit ab9cd6b · fix: description must start with 'Use when' per validator
2026-03-18 · commit 741a27f · feat: add Agent Skills spec frontmatter and evals
2026-02-25 · commit 4b64526 · refactor: trim SKILL.md to ~400 words for token efficiency
2026-02-25 · commit 36da66e · feat: add automated scanning tools (semgrep, trivy, gitleaks)
2026-02-15 · commit 8bdd772 · fix: address review feedback
2026-02-15 · commit fbdb543 · fix: align SKILL.md description with writing-skills quality standard
2026-02-07 · commit 0dcb245 · feat: add 19 CVE-derived checkpoints and cve-patterns.md reference
2026-02-07 · commit 65bf773 · feat: add CWE Top 25 (2025) coverage with 11 new checkpoints
2026-02-07 · commit 5893d44 · feat: security audit skill v2.0.0 - comprehensive expansion
2026-02-06 · commit bda89a2 · fix: correct dangerous XXE examples and audit script bugs
2026-01-06 · commit ecf1d35 · refactor: restructure skill for Claude Code compatibility

Archived snapshots