security-audit

原文涵盖的主题

• Security Auditing Workflow Bundle
• Overview
• When to Use This Workflow
• Workflow Phases
• Phase 1: Reconnaissance
• Skills to Invoke
• Actions
• Copy-Paste Prompts

Comprehensive security auditing workflow for web applications, APIs, and infrastructure. This bundle orchestrates skills for penetration testing, vulnerability assessment, security scanning, and remediation. Use this workflow when: Performing security audits on web applications Testing API security Conducting penetration tests Scanning for vulnerabilities Hardening application security Compliance security assessments scanning-tools - Security scanning shodan-reconnaissance - Shodan searches top-web-vulnerabilities - OWASP Top 10 1. Identify target scope 2. Gather intelligence 3. Map attack surface 4. Identify technologies 5. Document findings vulnerability-scanner - Vulnerability analysis security-scanning-security-sast - Static analysis security-scanning-security-dependencies - Dependency scanning 1. Run automated scanners 2. Perform static analysis 3. Scan dependencies 4. Identify misconfigurations 5. Document vulnerabilities top-web-vulnerabilities - OWASP vulnerabilities sql-injection-testing - SQL injection xss-html-injection - XSS testing broken-authentication - Authentication testing idor-testing - IDOR testing file-path-traversal - Path traversal burp-suite-testing - Burp S

这里只展示节选，请以完整原文和当前要求为准。