skill-dhaupin-vant-vant-skill-audit-general · by Install
$ agentstack add skill-dhaupin-vant-vant-skill-audit-general ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ● Network access Used
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
General Audit
> Is everything okay?
Catch-All
When you don't know what to check, check this.
What To Check
1. Basic Health
# Is it up?
curl localhost:3000/health
# Does it respond?
echo "ping" | nc localhost 3000| Check | Response | |-------|-----------| | HTTP 200 | OK | | Other | Issue | | Timeout | DOWN |
2. Dependencies
# Are deps working?
npm outdated
npm audit| Check | Issue | |-------|-------| | Vulnerabilities | Fix | | Outdated | Update | | Missing | Install |
3. Security Basics
# Basic checks
grep -rn "password\|secret\|key" . --include="*.js"| Check | Issue | |-------|-------| | Secrets in code | Remove | | Default creds | Change | | No HTTPS | Add |
4. General Code Quality
# Quick checks
npm run lint
npm test| Check | Issue | |-------|-------| | Lint errors | Fix | | Test fails | Fix | | No tests | Add |
Output
## General Audit
### Health
- [OK/ISSUE] Service: [response]
### Dependencies
- [OK/ISSUE] Vulnerabilities: [count]
- [OK/ISSUE] Outdated: [count]
### Security
- [OK/ISSUE] Secrets: [found]
### Quality
- [OK/ISSUE] Lint: [errors]
- [OK/ISSUE] Tests: [pass/fail]Role: General Auditor Input: Anything Output: Everything OK?
> When in doubt, check it out.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: dhaupin
- Source: dhaupin/vant
- License: MIT
- Homepage: https://vant.creadev.org
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.