cyberaudit-skill

CyberAudit Skill

Universal security audit skill for AI agents — now deterministic.
One install. 22 agents. Full OWASP coverage + deterministic scanners (secrets + web).

npx -y cyberaudit-skill install

What It Is

CyberAudit is a structured security audit framework delivered as an AI agent skill. It covers OWASP Top 10 (web), OWASP MASVS (mobile), API security, and cloud config — with scoring, severity ratings, and remediation guidance.

Deterministic scanners (no LLM needed):

• scan → 15 secret patterns (AWS, GitHub PAT, Stripe, private keys, JWT, DB URLs...) + 12 web vuln patterns (SQLi concat, XSS dangerouslySetInnerHTML, jwt.decode, CORS *, eval, mass assignment, NoSQLi)
• report → auto-generates markdown report with score, verdict, OWASP compliance, remediation plan

Supports 22 AI coding agents — like ui-ux-pro-max-skill:

Agent	Skill Path	Commands for "/" Menu	Method
OpenCode	~/.agents/skills/ + ~/.config/opencode/skills/	~/.config/opencode/commands/ (60 cmds)	File copy
Claude Code	~/.claude/skills/	~/.claude/commands/ (8 main)	File copy
Cursor	~/.cursor/skills/	~/.cursor/commands/ + mcp.json	MCP server
Windsurf	~/.windsurf/skills/	~/.windsurf/workflows/	File copy
Antigravity	~/.agent/skills/ + ~/.gemini/antigravity/skills/	~/.agent/workflows/	File copy
GitHub Copilot	~/.copilot/skills/ + ~/.github/copilot/skills/	~/.copilot/commands/	File copy
Kiro	~/.kiro/skills/	~/.kiro/commands/	File copy
Codex CLI	~/.codex/skills/	~/.codex/commands/	File copy
Qoder	~/.qoder/skills/	~/.qoder/commands/	File copy
Roo Code	~/.roo/skills/ + ~/.roocode/skills/	~/.roo/commands/	File copy
Gemini CLI	~/.gemini/skills/	~/.gemini/commands/	File copy
Trae	~/.trae/skills/	~/.trae/commands/	File copy
Continue	~/.continue/skills/	~/.continue/commands/	File copy
CodeBuddy	~/.codebuddy/skills/	~/.codebuddy/commands/	File copy
Droid (Factory)	~/.factory/skills/	~/.factory/commands/	File copy
KiloCode	~/.kilocode/skills/	~/.kilocode/commands/	File copy
Warp	~/.warp/skills/	~/.warp/commands/	File copy
Augment	~/.augment/skills/	~/.augment/commands/	File copy
CodeWhale	~/.codewhale/skills/	~/.codewhale/commands/	File copy
Cline	~/.cline/skills/	~/.cline/commands/	File copy
Aider	~/.aider/skills/	~/.aider/commands/	File copy

8 main slash commands shown when typing "/" (like ui-ux-pro): /audit, /audit:web, /audit:mobile, /audit:api, /audit:cloud, /audit:quick, /audit:report, /audit:help

• 52 additional commands (total 60) for full coverage.

Quick Start

# Auto-detect & install globally (~/) for all found agents (22 agents checked)
npx -y cyberaudit-skill install

# Project-local install like ui-ux-pro — 100% guarantee "/" shows 8 main commands
npx -y cyberaudit-skill install --agent all --local
# Creates ./.claude/skills/cyberaudit + ./.claude/commands/ (8 cmds), ./.cursor/commands/, ./.windsurf/workflows/, ./.agent/workflows/, etc.

# Install for a specific agent (global)
npx -y cyberaudit-skill install --agent claude-code
npx -y cyberaudit-skill install --agent cursor --global

# Install locally for one agent
npx -y cyberaudit-skill install --agent claude-code --local

# Preview without making changes
npx -y cyberaudit-skill install --dry-run
npx -y cyberaudit-skill install --dry-run --local

# Deterministic scan (no LLM)
npx -y cyberaudit-skill scan ./ --type all
npx -y cyberaudit-skill scan ./ --json > findings.json
npx -y cyberaudit-skill report ./ --input findings.json --type web --output report.md

Available Audits

Command	Scope	Deterministic?
cyberaudit-web	OWASP Top 10 web app audit	Yes (12 patterns)
cyberaudit-mobile	OWASP MASVS mobile audit	Via checklist
cyberaudit-api	API security audit	Via checklist
cyberaudit-cloud	Cloud config audit (S3, IAM, SG)	Via checklist
cyberaudit-full	Full stack (web + API + cloud)	Partial
cyberaudit-quick	5-minute scan (secrets + web)	Yes, fully deterministic

Usage (once installed)

In your AI agent, type "/" — you should see 8 main commands:

/audit
/audit:web
/audit:mobile
/audit:api
/audit:cloud
/audit:quick
/audit:report
/audit:help

Or classic:

/load-skill cyberaudit
/cyberaudit-web example.com

MCP Server

CyberAudit runs as a stdio MCP server for MCP-compatible agents (Cursor, Claude Desktop, Windsurf, etc.):

npx -y cyberaudit-skill serve

cyberaudit-quick now runs deterministic scanners (secrets + web) even via MCP.

Verify Installation

npx -y cyberaudit-skill list
# Shows 22 agents + main "/" commands

Deterministic vs LLM

• Deterministic (P2): 15 secret patterns + 12 web patterns + auto report (score, OWASP, remediation plan) — 40 tests, 0 hallucinations
• LLM-based: Checklists, philosophies, threat models, 60 commands for context-aware audit

Repository

https://github.com/ArisRoman/cyberaudit-skill

License

MIT