📦
content-creator
88Create Brand-Consistent Marketing Content
Marketing teams need content that stays consistent across channels. This skill helps plan, write, analyze, and optimize content for brand voice and SEO.
Writing & Content View
Skills security-audit
📦
security-audit
v1.0.0 Content revision r1 Critical ⚙️ External commands
Audit Web Apps and APIs
Security teams need a repeatable way to plan authorized assessments. This skill organizes reconnaissance, scanning, testing, hardening, and reporting steps.
Supports: Claude Codex Code(CC)
Do not auto-install this skill.
The canonical policy requires operator review before any installation action.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "security-audit" from https://skillstore.io/skills/sickn33-security-audit.md and its manifest at https://skillstore.io/api/skills/sickn33-security-audit/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "security-audit". A team needs an authorized review plan for a customer portal.
Expected outcome:
A phased plan covering scope confirmation, reconnaissance, vulnerability review, web testing, API checks, hardening tasks, and final reporting.
Using "security-audit". An API assessment found weak authorization and missing rate limits.
Expected outcome:
A prioritized finding summary with impact, affected endpoints, recommended fixes, validation steps, and reporting notes.
Using "security-audit". A security lead needs final quality gates before delivery.
Expected outcome:
A checklist confirming completed tests, captured evidence, assigned risk levels, remediation steps, and an executive-ready summary.
Security Audit
Criticalv4 • 7/7/2026 Open versioned report
Most static external-command findings are false positives caused by Markdown backticks in documentation. The Metasploit reference is confirmed, and the workflow includes dual-use offensive testing steps that need stronger authorization and dependency controls.
1
Files scanned
219
Lines analyzed
0
Review items
0
False positives ignored
Confirmed security concerns (3)
Critical
Metasploit framework
- `metasploit-framework` - Metasploit
Line 132 explicitly references Metasploit in the penetration testing phase. This is a high-risk offensive framework reference and matches the blocker pattern.
High
Offensive Exploitation Workflow
The penetration testing phase instructs users to execute attack scenarios, exploit vulnerabilities, capture proof of concept, and use Metasploit-related tooling.
The relevant section directly combines penetration testing, exploitation steps, pentest commands, and a Metasploit skill reference. Legitimate authorization is possible, but the workflow is clearly dual-use.
Medium
Unverified External Skill Chaining
The workflow repeatedly tells users to invoke many named specialist skills without source pinning, version constraints, or trust checks.
The document lists external skills across several phases, including offensive security topics. The file does not provide provenance, version pinning, or safety checks for those dependencies.
Risk Factors
⚙️ External commands (48)
SKILL.md:32 SKILL.md:33 SKILL.md:34 SKILL.md:44-46 SKILL.md:46-48 SKILL.md:48-50 SKILL.md:50-55 SKILL.md:55-56 SKILL.md:56-57 SKILL.md:57-67 SKILL.md:67-69 SKILL.md:69-71 SKILL.md:71-73 SKILL.md:73-78 SKILL.md:78-79 SKILL.md:79-80 SKILL.md:80-81 SKILL.md:81-82 SKILL.md:82-83 SKILL.md:83-84 SKILL.md:84-95 SKILL.md:95-97 SKILL.md:97-99 SKILL.md:99-101 SKILL.md:101-103 SKILL.md:103-105 SKILL.md:105-110 SKILL.md:110-111 SKILL.md:111-122 SKILL.md:122-124 SKILL.md:124-129 SKILL.md:129-130 SKILL.md:130-131 SKILL.md:131-132 SKILL.md:132-142 SKILL.md:142-144 SKILL.md:144-146 SKILL.md:146-148 SKILL.md:148-153 SKILL.md:153-154 SKILL.md:154-155 SKILL.md:155-166 SKILL.md:166-168 SKILL.md:168-173 SKILL.md:173-215 SKILL.md:215-216 SKILL.md:216-217 SKILL.md:217-218
Detected Patterns
Metasploit framework
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/sickn33-security-audit/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/sickn33-security-audit?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/sickn33-security-audit?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-security-audit/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/sickn33-security-audit.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
sickn33. (2026). security-audit security audit report (audit version 4) [Author version 1.0.0]. Skillstore. https://skillstore.io/skills/sickn33-security-audit/audits/4BibTeX citation
@techreport{sickn33-sickn33-security-audit-2026,
author = {sickn33},
title = {security-audit security audit report (audit version 4)},
institution = {Skillstore},
year = {2026},
number = {4},
url = {https://skillstore.io/skills/sickn33-security-audit/audits/4},
note = {Author version 1.0.0}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "security-audit security audit report (audit version 4)"
version: "1.0.0"
type: report
authors:
- name: "sickn33"
date-released: "2026-07-07"
url: "https://skillstore.io/skills/sickn33-security-audit/audits/4"
identifiers:
- type: other
value: "skillstore:sickn33-security-audit:audit:4"
description: "Skillstore immutable audit report identifier"
Compare variants
5 installable variantsEach author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.
Why this variant is first
Highest Skillstore Score
Author / source Skillstore Score Evidence Confidence Skillstore usage Updated
Joseph OBrien Recommended
89jobrien-security-audit
Skillstore Score 79
Evidence Confidence High
Skillstore usage 14
Updated
2026-09-09
applelamps-security-audit
Skillstore Score 78
Evidence Confidence High
Skillstore usage 13
Updated
2026-09-09
cloudflare-security-audit
Skillstore Score 76
Evidence Confidence Medium
Skillstore usage 2
Updated
2026-09-22
consiliency-security-audit
Skillstore Score 50
Evidence Confidence High
Skillstore usage 11
Updated
2026-09-09
sickn33 Current
sickn33-security-audit
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 15
Updated
2026-09-09
Skillstore Score
Why this score Evidence Confidence: Medium 55
Architecture
100
Maintainability
87
Content
69
Community
83
Spec Compliance
What You Can Build
Plan a Web Security Audit
Create a phase-based assessment plan for an authorized web application review.
Coordinate API Security Testing
Track authentication, authorization, rate limiting, input validation, and error handling checks.
Prepare Remediation Reporting
Turn confirmed findings into clear risk summaries, remediation steps, and quality gates.
Try These Prompts
Create an Audit Plan
Help me plan an authorized security audit for this application. Include scope, phases, evidence needed, and reporting checkpoints.
Review API Controls
Use this workflow to review API security controls. Focus on authentication, authorization, rate limits, validation, and error handling.
Prioritize Findings
Organize these security findings by impact, exploitability, affected assets, remediation effort, and evidence quality.
Build a Remediation Program
Convert this audit output into a remediation plan with owners, timelines, validation steps, and executive summary points.
Best Practices
- Confirm written authorization, target scope, timing, and testing limits before using this workflow.
- Review every referenced specialist skill before invocation, especially tools related to exploitation or reconnaissance.
- Keep evidence, risk ratings, remediation advice, and retest results linked to each finding.
Avoid
- Do not use the workflow against systems without explicit permission.
- Do not invoke offensive testing tools before confirming legal scope and safety controls.
- Do not publish findings without evidence, impact analysis, and practical remediation guidance.
Frequently Asked Questions
Does this skill run security scanners?
No. It is a workflow guide that coordinates phases and prompts. Referenced tools or skills must be reviewed separately.
Can I use it for production systems?
Use it only with explicit authorization, approved test windows, and documented safety controls for production assets.
Does it cover API security?
Yes. It includes API authentication, authorization, rate limiting, input validation, error handling, and reporting checks.
Is this suitable for compliance work?
It can support assessment planning and evidence organization, but compliance mapping must follow your required standard.
Does it include exploit code?
No. The skill text does not include exploit code, but it references offensive testing workflows that require strict controls.
What should I review before installing it?
Review the Metasploit and penetration testing references, plus every referenced external skill, before using this workflow.
Developer Details
Author
sickn33License
MIT
Author version
v1.0.0
Skillstore revision
r1
Ref
9f814fc6a43fd99946f2da5e0df231c65a38bc76
Maintenance freshness
7/18/2026
Usage
10 downloads · 106 views
File structure
📄 SKILL.md
More from sickn33
View all📦
prompt-engineering-patterns
85Improve LLM Prompts With Proven Patterns
Inconsistent prompts waste time and make AI outputs hard to trust. This skill guides prompt design with reusable patterns, examples, evaluation steps, and optimization workflows.
Productivity View
📦
senior-architect
81Review Architecture Workflows and Project Paths
Architecture reviews need a consistent starting point and clear project boundaries. This skill provides workspace-scoped tool templates, command examples, and generic design references.
Coding & Development View
📦
senior-fullstack
81Review Fullstack Project Foundations
Fullstack project setup can require many tools and checks. This skill provides basic local wrappers, common commands, and general engineering guidance.
Coding & Development View
📦
prompt-engineer
81Optimize AI Prompts With Prompt Engineer
Writing clear prompts is hard when goals are vague or complex. This skill turns rough requests into structured prompts using proven prompt frameworks.
Productivity View
📦
product-manager-toolkit
80Prioritize Product Work With Research Insights
Product teams need faster ways to rank features, synthesize interviews, and document decisions. This skill provides RICE scoring, interview analysis, and PRD templates for structured planning.
Productivity View
Related Skills
View all📦
security-report
78Create Security Assessment Reports
by BytR-Ecosystems
Security findings often become inconsistent reports that are difficult to prioritize. This skill guides structured DOCX reports with risk ratings, evidence, and remediation plans.
Security & Compliance View
📦
senior-security
81Strengthen Application Security Reviews
by alirezarezvani
Security reviews often lack consistent checklists and reusable workflows. This skill provides security review scaffolds, reference guidance, and simple reporting scripts for Claude, Codex, and Claude Code.
Security & Compliance View
📦
skill-check
80Validate Agent Skills Before Release
by JckJhns
Skill authors need evidence that a skill works and does not expose users to avoidable risk. SkillCheck reviews structure, security, evals, scripts, and outputs through tiered checks.
Security & Compliance View
📦
global-validation
79Validate Inputs Across Entry Points
by EIS-ITS
Input validation often becomes inconsistent across forms, APIs, and business rules. This skill guides Claude, Codex, and Claude Code toward secure validation patterns.
Security & Compliance View
📦
azure-compliance
79Audit Azure Compliance and Key Vault Expiration
by microsoft
Azure teams need a consistent way to identify compliance gaps and expiring Key Vault assets. This skill runs scoped assessments and produces prioritized remediation guidance.
Security & Compliance View
📦
auth-handler
79Protect Next.js Auth Routes
by AayushBaniya2006
Authentication changes often fail when teams mix session APIs and route guards. This skill guides Claude, Codex, and Claude Code toward the project helpers for secure access control.
Security & Compliance View