Production Code Audit

What it does

This skill performs automated code audits of production code, identifying potential vulnerabilities and areas for improvement. It analyzes code for common security flaws like SQL injection, cross-site scripting (XSS), and buffer overflows. The audit provides detailed reports with actionable recommendations to enhance code quality and security posture.

When to use it

• Before deploying new features or significant changes to a production environment.
• As part of a regular code review process for ongoing maintenance.
• When integrating third-party libraries or components into existing projects.
• To proactively identify and mitigate potential security risks in legacy codebase.
• Following a security incident to assess the impact and prevent recurrence.

Key capabilities

• Automated vulnerability detection
• Security flaw identification (SQL injection, XSS, buffer overflows)
• Code quality assessment
• Detailed reporting with recommendations

Example prompts

• "Audit this Python code for potential SQL injection vulnerabilities: [code snippet]"
• "Perform a security audit on the user_authentication.js file."
• "Analyze this JavaScript code and identify any XSS risks: [code snippet]"

Tips & gotchas

The effectiveness of the audit depends on the quality and clarity of the provided code. Ensure the code is well-formatted and includes sufficient context for accurate analysis.