Security Audit

使用场景

• Pre-deployment security review
• Identifying injection vulnerabilities (SQL, XSS, command)
• Authentication and authorization flow analysis
• Secrets and credential exposure detection
• Dependency vulnerability assessment

Perform a security audit on the following code.

Check for:
1. OWASP Top 10 vulnerabilities
2. Input validation and sanitization gaps
3. Authentication/authorization weaknesses
4. Secrets or credentials in code
5. Insecure dependencies or configurations
6. Missing security headers or CORS issues

For each finding, provide:
- Severity (critical/high/medium/low)
- CWE identifier if applicable
- Vulnerable code snippet
- Remediation with secure code example
- References to relevant security standards

Code to audit:
```
[paste code here]
```

推荐模型

兼容工具

模态

相关 Skills