Stats
Actions
Tags
'%20stop-opacity%3D'0.16'%2F%3E%3Cstop%20offset%3D'1'%20stop-color%3D'rgb(200%2C90%2C60)'%20stop-opacity%3D'0.03'%2F%3E%3C%2FlinearGradient%3E%3C%2Fdefs%3E%3Crect%20width%3D'320'%20height%3D'200'%20fill%3D'url(%23g)'%2F%3E%3Ccircle%20cx%3D'250'%20cy%3D'56'%20r%3D'92'%20fill%3D'rgb(200%2C90%2C60)'%20fill-opacity%3D'0.06'%2F%3E%3Ccircle%20cx%3D'64'%20cy%3D'172'%20r%3D'58'%20fill%3D'rgb(200%2C90%2C60)'%20fill-opacity%3D'0.05'%2F%3E%3C%2Fsvg%3E)
From audit
Scans a codebase for security vulnerabilities across dependencies, auth, input validation, data exposure, configs, and secrets. Produces prioritized findings with remediation steps.
How this command is triggered — by the user, by Claude, or both
Slash command
/audit:auditFiles this command reads when invoked
This command is limited to the following tools:
The summary Claude sees in its command listing — used to decide when to auto-load this command
## Context - Package.json dependencies: @package.json - Environment files: !`find . -name ".env*" -o -name "config.*" | head -10` - Potential security files: !`find . -name "*secret*" -o -name "*key*" -o -name "*password*" | head -10` ## Your task Perform a security audit focusing on: 1. **Dependency vulnerabilities**: Check for known CVEs 2. **Authentication/Authorization**: Review auth implementations 3. **Input validation**: Check for injection vulnerabilities 4. **Data exposure**: Look for sensitive data leaks 5. **Configuration security**: Review security configurations 6. **Secret...
find . -name ".env*" -o -name "config.*" | head -10find . -name "*secret*" -o -name "*key*" -o -name "*password*" | head -10Perform a security audit focusing on:
Target: $ARGUMENTS (if specified, otherwise audit entire codebase)
Provide prioritized findings with remediation steps.
7plugins reuse this command
First indexed Jan 1, 2026
Showing the 6 earliest of 7 plugins
npx claudepluginhub xbim08/awesome-claude-code-plugins --plugin audit/auditScans a codebase for security vulnerabilities across dependencies, auth, input validation, data exposure, configs, and secrets. Produces prioritized findings with remediation steps.
/auditPerforms a security audit of the codebase covering dependency vulnerabilities, secrets scanning, OWASP Top 10, input validation, and auth. Produces a severity-ranked findings report with actionable fixes.
/security-auditPerforms a systematic security audit covering dependencies, authentication, input validation, data protection, secrets, error handling, infrastructure, and security headers. Produces a prioritized report with remediation steps.
/scanRuns a deterministic security scan combining native checks (secret patterns, file permissions, git tracking) with auto-detected external tools (gitleaks, pip-audit, npm audit).
/scanRuns a comprehensive security audit covering dependencies, code patterns, configuration, and OWASP Top 10 checks. Adapts to the discovered project stack.
/security-scanScans code for hardcoded secrets, vulnerable dependencies, and common security issues before commits and PRs.