security-auditlisted

# Security, Bug & Data Protection Audit A single comprehensive audit skill that replaces ad-hoc prompt lists. It combines static checklist review (100+ items, mapped to current industry standards) with a live threat-intel step, so findings reflect *this week's* attack patterns, not a stale training-data snapshot. This skill is defensive/blue-team only: it finds and helps fix weaknesses in code the user owns or is authorized to audit. It never generates exploit code, malware, or attack tooling — only detection guidance and fixes. ## When NOT to over-trigger Don't run the full audit for a one-line code question, a single function review, or when the user is mid-feature-development and just wants that feature reviewed. In those cases, do a targeted check against the relevant category file only (see references/). Reserve the full 100+ item run for explicit audit requests or pre-launch checks. ## Workflow Run these five phases in order. Don't skip phases 1 and 5 — they're what makes this audit better than a static checklist someone could paste from a PDF. ### Phase 1 — Recon (before opening the checklist) Figure out what you're actually auditing before picking checks: - Stack: language(s), framework(s), package manager(s), DB, auth provider, hosting. - App type: has payments? has auth/accounts? multi-tenant? handles PII? has an LLM/agent component? public API? mobile app? Note this because it determines which checklist categories matter most (e.g., skip Category 11, LL