Baseline Security Audit Skill

Overview

This skill performs a comprehensive baseline security audit of the codebase by analyzing common security vulnerabilities and misconfigurations. It can create Jira stories for selected findings after user confirmation for tracking and remediation.

What This Skill Does

This skill performs the following security checks (each with detailed guidance in the references folder):

1. Secrets and Credentials - Scans for hardcoded secrets, credentials and API keys, and verifies that credentials differ per environment

   • See references/secrets.md

2. Package Security - Checks for dependencies with known vulnerabilities, end-of-life runtimes and supply-chain controls

   • See references/packages.md

3. SQL Injection - Identifies SQL injection vulnerabilities in database queries

   • See references/sql_injection.md