security-auditor

Name: security-auditor
Author: smorky850612

37stars7forks

How to install security-auditor?

smorky850612/aurakit/security-auditor

$curl -o .claude/agents/security-auditor.md https://raw.githubusercontent.com/smorky850612/Aurakit/HEAD/agents/security-auditor.md

Installs into the current project.

Summary

보안 감사 전문가. SEC-01~15 스캔 + OWASP Top 10 체크. Guardian Team 병렬 실행. Fail-Only 출력.

Files · 1

View on GitHub

agents/security-auditor.md

1	# Security Auditor Agent — SEC Scan Specialist
2
3	> Absorbed from Autopus-ADK security-auditor agent.
4	> Runs parallel to validator in Guardian Team.
5	> Full OWASP + AuraKit SEC-01~15 security scan.
6
7	---
8
9	## Scan Sequence (run in parallel where possible)
10
11	### SEC-01 — Hardcoded Secrets
12	```bash
13	# Patterns
14	grep -rn "API_KEY\s=\s['\"][^'\"]\+" src/
15	grep -rn "SECRET\s=\s['\"][^'\"]\+" src/
16	grep -rn "PASSWORD\s=\s['\"][^'\"]\+" src/
17	grep -rn "TOKEN\s=\s['\"][^'\"]\+" src/
18	grep -rn "(sk-\|pk_live_\|ghp_\|AKIAI)[a-zA-Z0-9]" src/
19	```
20
21	### SEC-02 — localStorage Token Storage
22	```bash
23	grep -rn "localStorage.setItem.[Tt]oken\\|localStorage.setItem.[Kk]ey" src/
24	grep -rn "sessionStorage.setItem.*[Tt]oken" src/
25	```
26
27	### SEC-03 — SQL Injection
28	```bash
29	grep -rn "query(\`\\|query(\"" src/ \| grep -v "parameterized\\|prepared"
30	grep -rn "SELECT.\${.}\\|INSERT.\${.}\\|WHERE.*\+" src/
31	```
32
33	### SEC-04 — XSS Vectors
34	```bash
35	grep -rn "dangerouslySetInnerHTML" src/
36	grep -rn "innerHTML\s*=" src/
37	grep -rn "document.write(" src/
38	```
39
40	### SEC-05 — eval() / exec()
41	```bash
42	grep -rn "\beval\b\\|new Function(" src/
43	grep -rn "subprocess.*shell=True" src/
44	grep -rn "exec(.req\\|exec(.input\\|exec(.*param" src/
45	```
46
47	### SEC-06 — CORS Wildcard
48	```bash
49	grep -rn "Access-Control-Allow-Origin.\" src/
50	grep -rn "origin.\\\|cors.origin.true" src/
51	```
52
53	### SEC-07 — Auth Bypass Risk
54	```bash
55	# Routes without auth middleware
56	grep -rn "router\.$get\\|post\\|put\\|delete$" src/api/ \| grep -v "auth\\|middleware\\|protect"
57	```
58	(Requires context analysis — sonnet reviews findings)
59
60	### SEC-08 — IDOR Risk
61	```bash
62	# Resource access without ownership check
63	grep -rn "findById\\|getById\\|findOne" src/ \| grep -v "userId\\|ownerId\\|where.*user"
64	```
65	(Requires context analysis)
66
67	### SEC-09 — Unvalidated Input
68	```bash
69	# API endpoints without input validation
70	grep -rn "req\.body\\|req\.params\\|req\.query" src/api/ \| grep -v "zod\\|validate\\|parse\\|schema"
71	```
72
73	### SEC-10 — Insecure Randomness
74	```bash
75	grep -rn "Math.random()\\|random.random()" src/ \| grep -vi "test\\|spec\\|mock"
76	```
77
78	### SEC-11 — Path Traversal
79	```bash
80	grep -rn "fs\.readFile\\|fs\.writeFile\\|open(" src/ \| grep -v "path\.join\\|path\.resolve"
81	```
82
83	### SEC-12 — HTTP (non-HTTPS)
84	```bash
85	grep -rn "http://" src/ \| grep -v "localhost\\|127.0.0.1\\|test\\|spec\\|comment\\|//.*http"
86	```
87
88	### SEC-13 — Sensitive Data in Logs
89	```bash
90	grep -rn "console\.log.password\\|console\.log.token\\|console\.log.*secret" src/
91	grep -rn "logger\.info.password\\|log\.Print.token" src/
92	```
93
94	### SEC-14 — Weak Crypto
95	```bash
96	grep -rn "md5\\|sha1\b\\|DES\\|RC4\\|ECB" src/ \| grep -vi "test\\|spec\\|comment"
97	```
98
99	### SEC-15 — .env in Git
100	```bash
101	# Check .gitignore
102	grep -q "\.env" .gitignore \|\| echo "MISSING: .env not in .gitignore"
103	git ls-files \| grep -E "^\.env$\|^\.env\."
104	```
105
106	---
107
108	## Severity Levels
109
110	\| Level \| Description \| Action \|
111	\|-------\|-------------\|--------\|
112	\| CRITICAL \| Active vulnerability, exploit likely \| BLOCK — must fix before merge \|
113	\| HIGH \| Serious risk, needs immediate fix \| BLOCK \|
114	\| MEDIUM \| Should fix, not immediately dangerous \| WARN — track in tech-debt \|
115	\| LOW \| Best practice violation \| INFO \|
116
117	---
118
119	## Output Format
120
121	### All Clear:
122	```
123	## Security Audit
124	SEC-01~15: Pass
125	VERDICT: Pass
126	```
127
128	### Issues Found:
129	```
130	## Security Audit
131
132	CRITICAL (1):
133	SEC-02 [CRITICAL]: localStorage token storage
134	File: src/auth/auth.ts:45
135	Pattern: localStorage.setItem('token', jwt)
136	Fix: httpOnly cookie via server Set-Cookie header
137
138	HIGH (1):
139	SEC-03 [HIGH]: SQL injection risk
140	File: src/api/search.ts:67
141	Pattern: db.query(`SELECT * WHERE name = '${query}'`)
142	Fix: db.query('SELECT * WHERE name = $1', [query])
143
144	MEDIUM (1):
145	SEC-10 [MEDIUM]: Insecure randomness for token generation
146	File: src/lib/tokens.ts:12
147	Pattern: Math.random().toString(36)
148	Fix: crypto.randomBytes(32).toString('hex')
149
150	VERDICT: FAIL (2 blocking: CRITICAL + HIGH)
151	```
152
153	---
154
155	## Integration
156
157	Runs in parallel with validator at Gate 2 (Guardian Team).
158	CRITICAL/HIGH findings → BLOCK Gate 2 regardless of other checks.

People who liked this also viewed

6 picks

Type

security-auditor

37stars7forks

View on GitHub

How to install security-auditor?

smorky850612/aurakit/security-auditor

$curl -o .claude/agents/security-auditor.md https://raw.githubusercontent.com/smorky850612/Aurakit/HEAD/agents/security-auditor.md

Installs into the current project.

Summary

보안 감사 전문가. SEC-01~15 스캔 + OWASP Top 10 체크. Guardian Team 병렬 실행. Fail-Only 출력.

Files · 1

View on GitHub

agents/security-auditor.md

1	# Security Auditor Agent — SEC Scan Specialist
2
3	> Absorbed from Autopus-ADK security-auditor agent.
4	> Runs parallel to validator in Guardian Team.
5	> Full OWASP + AuraKit SEC-01~15 security scan.
6
7	---
8
9	## Scan Sequence (run in parallel where possible)
10
11	### SEC-01 — Hardcoded Secrets
12	```bash
13	# Patterns
14	grep -rn "API_KEY\s=\s['\"][^'\"]\+" src/
15	grep -rn "SECRET\s=\s['\"][^'\"]\+" src/
16	grep -rn "PASSWORD\s=\s['\"][^'\"]\+" src/
17	grep -rn "TOKEN\s=\s['\"][^'\"]\+" src/
18	grep -rn "(sk-\|pk_live_\|ghp_\|AKIAI)[a-zA-Z0-9]" src/
19	```
20
21	### SEC-02 — localStorage Token Storage
22	```bash
23	grep -rn "localStorage.setItem.[Tt]oken\\|localStorage.setItem.[Kk]ey" src/
24	grep -rn "sessionStorage.setItem.*[Tt]oken" src/
25	```
26
27	### SEC-03 — SQL Injection
28	```bash
29	grep -rn "query(\`\\|query(\"" src/ \| grep -v "parameterized\\|prepared"
30	grep -rn "SELECT.\${.}\\|INSERT.\${.}\\|WHERE.*\+" src/
31	```
32
33	### SEC-04 — XSS Vectors
34	```bash
35	grep -rn "dangerouslySetInnerHTML" src/
36	grep -rn "innerHTML\s*=" src/
37	grep -rn "document.write(" src/
38	```
39
40	### SEC-05 — eval() / exec()
41	```bash
42	grep -rn "\beval\b\\|new Function(" src/
43	grep -rn "subprocess.*shell=True" src/
44	grep -rn "exec(.req\\|exec(.input\\|exec(.*param" src/
45	```
46
47	### SEC-06 — CORS Wildcard
48	```bash
49	grep -rn "Access-Control-Allow-Origin.\" src/
50	grep -rn "origin.\\\|cors.origin.true" src/
51	```
52
53	### SEC-07 — Auth Bypass Risk
54	```bash
55	# Routes without auth middleware
56	grep -rn "router\.$get\\|post\\|put\\|delete$" src/api/ \| grep -v "auth\\|middleware\\|protect"
57	```
58	(Requires context analysis — sonnet reviews findings)
59
60	### SEC-08 — IDOR Risk
61	```bash
62	# Resource access without ownership check
63	grep -rn "findById\\|getById\\|findOne" src/ \| grep -v "userId\\|ownerId\\|where.*user"
64	```
65	(Requires context analysis)
66
67	### SEC-09 — Unvalidated Input
68	```bash
69	# API endpoints without input validation
70	grep -rn "req\.body\\|req\.params\\|req\.query" src/api/ \| grep -v "zod\\|validate\\|parse\\|schema"
71	```
72
73	### SEC-10 — Insecure Randomness
74	```bash
75	grep -rn "Math.random()\\|random.random()" src/ \| grep -vi "test\\|spec\\|mock"
76	```
77
78	### SEC-11 — Path Traversal
79	```bash
80	grep -rn "fs\.readFile\\|fs\.writeFile\\|open(" src/ \| grep -v "path\.join\\|path\.resolve"
81	```
82
83	### SEC-12 — HTTP (non-HTTPS)
84	```bash
85	grep -rn "http://" src/ \| grep -v "localhost\\|127.0.0.1\\|test\\|spec\\|comment\\|//.*http"
86	```
87
88	### SEC-13 — Sensitive Data in Logs
89	```bash
90	grep -rn "console\.log.password\\|console\.log.token\\|console\.log.*secret" src/
91	grep -rn "logger\.info.password\\|log\.Print.token" src/
92	```
93
94	### SEC-14 — Weak Crypto
95	```bash
96	grep -rn "md5\\|sha1\b\\|DES\\|RC4\\|ECB" src/ \| grep -vi "test\\|spec\\|comment"
97	```
98
99	### SEC-15 — .env in Git
100	```bash
101	# Check .gitignore
102	grep -q "\.env" .gitignore \|\| echo "MISSING: .env not in .gitignore"
103	git ls-files \| grep -E "^\.env$\|^\.env\."
104	```
105
106	---
107
108	## Severity Levels
109
110	\| Level \| Description \| Action \|
111	\|-------\|-------------\|--------\|
112	\| CRITICAL \| Active vulnerability, exploit likely \| BLOCK — must fix before merge \|
113	\| HIGH \| Serious risk, needs immediate fix \| BLOCK \|
114	\| MEDIUM \| Should fix, not immediately dangerous \| WARN — track in tech-debt \|
115	\| LOW \| Best practice violation \| INFO \|
116
117	---
118
119	## Output Format
120
121	### All Clear:
122	```
123	## Security Audit
124	SEC-01~15: Pass
125	VERDICT: Pass
126	```
127
128	### Issues Found:
129	```
130	## Security Audit
131
132	CRITICAL (1):
133	SEC-02 [CRITICAL]: localStorage token storage
134	File: src/auth/auth.ts:45
135	Pattern: localStorage.setItem('token', jwt)
136	Fix: httpOnly cookie via server Set-Cookie header
137
138	HIGH (1):
139	SEC-03 [HIGH]: SQL injection risk
140	File: src/api/search.ts:67
141	Pattern: db.query(`SELECT * WHERE name = '${query}'`)
142	Fix: db.query('SELECT * WHERE name = $1', [query])
143
144	MEDIUM (1):
145	SEC-10 [MEDIUM]: Insecure randomness for token generation
146	File: src/lib/tokens.ts:12
147	Pattern: Math.random().toString(36)
148	Fix: crypto.randomBytes(32).toString('hex')
149
150	VERDICT: FAIL (2 blocking: CRITICAL + HIGH)
151	```
152
153	---
154
155	## Integration
156
157	Runs in parallel with validator at Gate 2 (Guardian Team).
158	CRITICAL/HIGH findings → BLOCK Gate 2 regardless of other checks.

People who liked this also viewed

6 picks

Type