aguleykovn8n/security-audit-skill

A Claude Code skill that performs automated, multi-stack security audits for web projects. Intended for developers, security engineers and compliance teams (especially for Russian tenders) to run pre-launch, periodic or post-incident checks. It combines OWASP Top 10 (2021), Russian standards (ГОСТ Р 56939-2024, Приказ ФСТЭК №21, ФЗ-152), and STRIDE threat modeling into a reusable workflow. Key features: parallel reviewer subagents, prioritized reports with file:line evidence, grep patterns and stack-specific checks for Node/TypeScript, Python, Go, Rust (partial PHP/Java/Ruby), component checklists (auth, payments, admin, uploads, APIs), STRIDE templates, AI-generated code-gotchas, and Excel-style compliance matrices for RU standards. Installs as a Claude Code skill and integrates with optional plugins (Codex validation, fix-plan generation).

AI-related keywords found in this repo's description, topics, or README summary — grouped by category. Each badge links to the corresponding ranking detail page.