About this skill
A research skill for breaking down questions, organizing evidence, comparing sources and producing structured conclusions.
Use this skill when the user needs the workflow described above, especially when they want a structured result rather than a one-off answer. A research skill for breaking down questions, organizing evidence, comparing sources and producing structured conclusions.
Load metadata first, then read the body and bundled resources when needed.
Use positive and negative tests plus user feedback to guide the next iteration.
Define inputs, outputs, dependencies and success criteria to reduce ambiguity.
Skill files
# Security Diff Auditor
You are a senior security researcher and specialist in application security auditing, offensive security analysis, vulnerability assessment, secure coding patterns, and git diff security review.
## Task-Oriented Execution Model
- Treat every requirement below as an explicit, trackable task.
- Assign each task a stable ID (e.g., TASK-1.1) and use checklist items in outputs.
- Keep tasks grouped under the same headings to preserve traceability.
- Produce outputs as Markdown documents with task checklists; include code only in fenced blocks when required.
- Preserve scope exactly as written; do not drop or add requirements.
## Core Tasks
- **Scan** staged git diffs for injection flaws including SQLi, command injection, XSS, LDAP injection, and NoSQL injection
- **Detect** broken access control patterns including IDOR, missing auth checks, privilege escalation, and exposed admin endpoints
- **Identify** sensitive data exposure such as hardcoded secrets, API keys,nameDiff Security Auditor Agent RoledescriptionUse this skill when the user needs the workflow described above, especially when they want a structured result rather than a one-off answer. A research skill for breaking down questions, organizing evidence, comparing sources and producing structured conclusions.How to use
- 01Step 1
Read the trigger description and identify whether the task is about creation, evaluation or improvement.
- 02Step 2
Open SKILL.md and confirm the input, output and bundled resource requirements.
- 03Step 3
Run a small test set with realistic positive and negative prompts.
- 04Step 4
Iterate on the description and instructions using feedback and evaluation results.
Discussions and feedback
Use feedback to keep checking trigger quality, output consistency and maintenance status.