Security Audit Use this skill when the user asks to audit security, check for vulnerabilities, review code for security issues, or harden an application. Steps 1. Scan for hardcoded secrets — search for API keys, tokens, passwords, and connection strings in source files. Check for patterns like: - , , , - Base64-encoded credentials - AWS keys ( ), Stripe keys ( ), GitHub tokens ( ) - Files: committed to git, with credentials 2. Check authentication & authorization - Verify all API routes check authentication before processing. - Ensure role-based access control is enforced server-side, not ju…