alboechat

appsec-vulnerability-auditor

Audit application source code for security vulnerabilities across modern and legacy codebases, including AI-generated and "vibe-coded" software. Use this skill when the user asks to "review for security", "audit for vulnerabilities", "find security bugs", "do a security review", "check for OWASP Top 10", "look for injection / XSS / SSRF / IDOR / authz issues", or pastes/uploads source code (or a repo, diff, PR) and asks whether it is safe to ship. Also trigger on requests to evaluate AI-generated code, LLM-produced patches, copy-pasted Stack Overflow snippets, or rapidly prototyped MVPs for security risks. Produces a prioritized findings report (Critical / High / Medium / Low / Informational) with reproduction notes, exploit sketches, and concrete remediation patches. Also trigger on "auditar segurança", "revisar segurança", "encontrar vulnerabilidades", "é seguro para o deploy?".