About velimattiv/claude-security-audit
A thorough, multi-phase security audit skill for Claude Code and GitHub Copilot CLI. Goes beyond generic vulnerability scanning by enumerating every attack surface (HTTP, gRPC, GraphQL, WebSocket, queue consumers, serverless handlers, mobile/desktop IPC — polyglot across 60+ frameworks), running an OWASP-methodology-tagged scanner bundle, and executing 12 parallel deep-dive categories (Auth/Authz, IDOR/BOLA, Token Scope, Collection Scoping, MITM, Crypto, Secrets, Deployment, Injection/SSRF, LLM-specific, Supply Chain & CI/CD, MCP/Agentic). Severity is computed over composed attack paths rather than asserted per finding.