Agent Skills › omnigent-ai/omnigent › security-audit

security-audit

GitHub

用于代码库安全审计，检测硬编码密钥、注入漏洞等安全问题并生成结构化报告。仅输出结果，不进行修复。

examples/sentinel/skills/security-audit/SKILL.md omnigent-ai/omnigent

Trigger Scenarios

用户请求安全审查用户要求审计代码库用户检查代码漏洞

Install

npx skills add omnigent-ai/omnigent --skill security-audit -g -y

More Options

Non-standard path

npx skills add https://github.com/omnigent-ai/omnigent/tree/main/examples/sentinel/skills/security-audit -g -y

Use without installing

npx skills use omnigent-ai/omnigent@security-audit

指定 Agent (Claude Code)

npx skills add omnigent-ai/omnigent --skill security-audit -a claude-code -g -y

安装 repo 全部 skill

npx skills add omnigent-ai/omnigent --all -g -y

预览 repo 内 skill

npx skills add omnigent-ai/omnigent --list

SKILL.md

Frontmatter

{
    "name": "security-audit",
    "description": "Audit a codebase or directory for security issues (hardcoded secrets, injection, unsafe deserialization, weak crypto, authz gaps) and produce a structured findings report. Use when the user asks for a security review, an audit, or to check code for vulnerabilities. Report only — never fix."
}

security-audit — review code for security issues, report only

1. Collect scope

Identify what to audit (a directory, a diff, a module). Gather it yourself with sys_os_* / git — this is plumbing, not investigation.

2. Dispatch the scanner (purpose: explore / search)

Hand the scanner the scope; it reads source, manifests, history and returns per-finding evidence. Do NOT sprawl across the repo yourself.

3. Synthesize the draft — FINDINGS TEMPLATE (must match orchestrator prompt)

For each finding:

### <Severity>: <short title>
- **Severity**: Critical | High | Medium | Low | Info
- **Location**: file:line
- **Recommendation**: <fix guidance — describe it, never apply it>
- **Confidence**: high | medium | low