Security Auditor

Use when reviewing code for security vulnerabilities, implementing authentication flows, auditing OWASP Top 10, configuring CORS/CSP headers, handling secrets, input validation, SQL injection prevention, XSS protection, or any security-related code review.

Install only if you want a security-review assistant that may advise changes in sensitive parts of a project. Treat its dependency commands as suggestions, not automatic steps: pin or use locally locked tools, review any package changes, and require explicit approval before modifying auth, secrets, middleware, database schema, or package files.

Type: OpenClaw Skill Name: security-auditor Version: 1.0.0 The skill bundle is designed to equip an AI agent with the knowledge and processes to perform security audits. The `SKILL.md` file provides extensive guidance on secure coding practices, OWASP Top 10 vulnerabilities, security headers, input validation, authentication best practices, and dependency security. All code examples clearly differentiate between insecure and secure patterns, serving an educational purpose. There is no evidence of malicious intent, data exfiltration, unauthorized execution, persistence, or prompt injection aimed at subverting the agent's intended function; instead, it explicitly promotes secure development and auditing practices.