# security-audit

> Threat-driven security review focusing on trust boundaries and exploitability

- Author: Tom Nordal
- Repository: tnordal/opencode_config
- Version: 20260128180929
- Stars: 0
- Forks: 0
- Last Updated: 2026-02-06
- Source: https://github.com/tnordal/opencode_config
- Web: https://mule.run/skillshub/@@tnordal/opencode_config~security-audit:20260128180929

---

---
name: security-audit
description: Threat-driven security review focusing on trust boundaries and exploitability
license: MIT
compatibility: opencode
metadata:
  audience: security
  scope: code
---

## What I do
- Identify trust boundaries (user input, network, filesystem, secrets)
- Look for injection, authz gaps, and sensitive data exposure
- Recommend fixes prioritized by exploitability and blast radius

## What I need
- Entry points (HTTP handlers, CLI args, jobs)
- Data stores and credential paths
- Deployment context (single-tenant vs multi-tenant)

## Output
- Findings with severity and suggested remediation
- Concrete examples of exploitation paths when applicable