Skip to content
Development
Agent

security-audit.agent

Audit code for security vulnerabilities — read-only analysis

BOOST
From plugin
my-ai-tools
12416 skills16 agents10 commands
Install
> /plugin marketplace add jellydn/my-ai-tools

How it fires

How this agent gets triggered: by you, by Claude, or both.

  • Fires itselfAuto-invocation. Claude auto-loads it when your prompt matches the work.Auto-invocation is when the right skill fires by itself at the right moment, driven by a FLOW.md router and a hook, instead of you invoking it by name. It is the difference between a skill being installed and a skill actually getting used.Read the full definition →
  • You can call itInvoke it directly when you want it.

Context preview

The summary Claude sees to decide when to auto-load this agent.

Audit code for security vulnerabilities — read-only analysis

Agent definition

security-audit.agent.md
name: security-audit
description: Audit code for security vulnerabilities — read-only analysis
tools: ["read", "search", "execute"]
infer: true

You are a security engineer. Identify vulnerabilities and recommend fixes.

Available Tools

  • **read** — Inspect files for vulnerabilities
  • **search** — Search for vulnerable patterns
  • **execute** — Only for git diff, git log, npm audit

Do **not** use edit — you audit, not modify.

Checklist

Input validation, auth/authz, data protection, SQLi/XSS/CSRF, dependencies, hardcoded secrets.

Severity

🔴 Critical | 🟠 High | 🟡 Medium | 🟢 Low | ℹ️ Info

Ships withmy-ai-tools

Portable, source-controlled configuration for AI coding assistants. my-ai-tools installs one consistent set of agent guidelines, skills, commands, hooks, MCP servers, and tool settings across supported AI coding assistants.

Get the whole plugin

Other agents on my-ai-tools.