cyberaudit-skill 3.1.5 → 3.2.0

package/skills/cyberaudit/commands/audit-express.md

@@ -0,0 +1,11 @@
+---
+description: Express-specific audit
+---
+Express-specific audit — /audit:express
+
+1. Load web/frameworks/EXPRESS.md
+2. Check helmet, cors, middleware order (auth before routes), next() after error, input validation
+
+Output:
+- Findings with [VULN-...] numbering, CVSS 3.1 vector, file:line, vulnerable code, fixed code, references.
+- Use templates from reports/ if needed.

package/skills/cyberaudit/commands/audit-flutter.md

@@ -0,0 +1,11 @@
+---
+description: Flutter audit
+---
+Flutter audit — /audit:flutter
+
+1. Load mobile/frameworks/FLUTTER.md
+2. Check method channels, secure storage, obfuscation, SSL pinning
+
+Output:
+- Findings with [VULN-...] numbering, CVSS 3.1 vector, file:line, vulnerable code, fixed code, references.
+- Use templates from reports/ if needed.

package/skills/cyberaudit/commands/audit-headers.md

@@ -0,0 +1,11 @@
+---
+description: HTTP security headers audit
+---
+HTTP security headers audit — /audit:headers
+
+1. Load web/vulnerabilities/HEADERS.md
+2. Check CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy
+
+Output:
+- Findings with [VULN-...] numbering, CVSS 3.1 vector, file:line, vulnerable code, fixed code, references.
+- Use templates from reports/ if needed.

package/skills/cyberaudit/commands/audit-hipaa.md

@@ -0,0 +1,11 @@
+---
+description: HIPAA compliance check
+---
+HIPAA compliance check — /audit:hipaa
+
+1. Load shared/COMPLIANCE.md HIPAA
+2. Check PHI encryption, audit logs, access controls, minimal necessary
+
+Output:
+- Findings with [VULN-...] numbering, CVSS 3.1 vector, file:line, vulnerable code, fixed code, references.
+- Use templates from reports/ if needed.

package/skills/cyberaudit/commands/audit-idor.md

@@ -0,0 +1,11 @@
+---
+description: IDOR & BOLA audit (web)
+---
+IDOR & BOLA audit (web) — /audit:idor
+
+1. Load web/vulnerabilities/IDOR-BOLA.md
+2. Test ID manipulation on every resource, ownership check
+
+Output:
+- Findings with [VULN-...] numbering, CVSS 3.1 vector, file:line, vulnerable code, fixed code, references.
+- Use templates from reports/ if needed.

package/skills/cyberaudit/commands/audit-injection.md

@@ -0,0 +1,12 @@
+---
+description: Injection audit — SQL, NoSQL, Command, SSTI
+---
+Injection audit — SQL, NoSQL, Command, SSTI — /audit:injection
+
+1. Load web/vulnerabilities/INJECTION.md
+2. Scan for string interpolation in SQL/NoSQL, exec/system with user input, template rendering with user input
+3. Propose parameterized queries, mongoSanitize, execFile
+
+Output:
+- Findings with [VULN-...] numbering, CVSS 3.1 vector, file:line, vulnerable code, fixed code, references.
+- Use templates from reports/ if needed.

package/skills/cyberaudit/commands/audit-ionic.md

@@ -0,0 +1,11 @@
+---
+description: Ionic audit
+---
+Ionic audit — /audit:ionic
+
+1. Load mobile/frameworks/IONIC.md
+2. Check WebView whitelist, plugin risky, mixed content
+
+Output:
+- Findings with [VULN-...] numbering, CVSS 3.1 vector, file:line, vulnerable code, fixed code, references.
+- Use templates from reports/ if needed.

package/skills/cyberaudit/commands/audit-laravel.md

@@ -0,0 +1,11 @@
+---
+description: Laravel-specific audit
+---
+Laravel-specific audit — /audit:laravel
+
+1. Load web/frameworks/LARAVEL.md
+2. Check: mass assignment, debug mode, routes auth, DB::select interpolation, Blade {!! !!}, APP_DEBUG
+
+Output:
+- Findings with [VULN-...] numbering, CVSS 3.1 vector, file:line, vulnerable code, fixed code, references.
+- Use templates from reports/ if needed.

package/skills/cyberaudit/commands/audit-logic.md

@@ -0,0 +1,11 @@
+---
+description: Business logic flaws audit
+---
+Business logic flaws audit — /audit:logic
+
+1. Load web/vulnerabilities/BUSINESS-LOGIC.md
+2. Check race conditions, price manipulation, workflow bypass, negative values, TOCTOU
+
+Output:
+- Findings with [VULN-...] numbering, CVSS 3.1 vector, file:line, vulnerable code, fixed code, references.
+- Use templates from reports/ if needed.

package/skills/cyberaudit/commands/audit-masvs.md

@@ -0,0 +1,11 @@
+---
+description: MASVS 2.0 score
+---
+MASVS 2.0 score — /audit:masvs
+
+1. Load MOBILE-CHECKLIST.md
+2. Calculate score per MASVS category STORAGE, CRYPTO, AUTH, NETWORK, PLATFORM, CODE
+
+Output:
+- Findings with [VULN-...] numbering, CVSS 3.1 vector, file:line, vulnerable code, fixed code, references.
+- Use templates from reports/ if needed.

package/skills/cyberaudit/commands/audit-nestjs.md

@@ -0,0 +1,11 @@
+---
+description: NestJS-specific audit
+---
+NestJS-specific audit — /audit:nestjs
+
+1. Load web/frameworks/NESTJS.md
+2. Check ValidationPipe whitelist:true, guards order, DTO forbidNonWhitelisted, ORM ownership
+
+Output:
+- Findings with [VULN-...] numbering, CVSS 3.1 vector, file:line, vulnerable code, fixed code, references.
+- Use templates from reports/ if needed.

package/skills/cyberaudit/commands/audit-network.md

@@ -0,0 +1,11 @@
+---
+description: Network security audit (mobile)
+---
+Network security audit (mobile) — /audit:network
+
+1. Load mobile/vulnerabilities/NETWORK-MOBILE.md
+2. Check HTTPS only, cleartextTraffic false, cert pinning, tokens in header not query
+
+Output:
+- Findings with [VULN-...] numbering, CVSS 3.1 vector, file:line, vulnerable code, fixed code, references.
+- Use templates from reports/ if needed.

package/skills/cyberaudit/commands/audit-nextjs.md

@@ -0,0 +1,11 @@
+---
+description: Next.js-specific audit
+---
+Next.js-specific audit — /audit:nextjs
+
+1. Load web/frameworks/NEXTJS.md
+2. Check NEXT_PUBLIC_ secrets, API routes auth, server components SSRF, middleware bypass, image domains
+
+Output:
+- Findings with [VULN-...] numbering, CVSS 3.1 vector, file:line, vulnerable code, fixed code, references.
+- Use templates from reports/ if needed.

package/skills/cyberaudit/commands/audit-owasp.md

@@ -0,0 +1,11 @@
+---
+description: OWASP Top 10 2023 score
+---
+OWASP Top 10 2023 score — /audit:owasp
+
+1. Load shared/OWASP-MAPPER.md
+2. Map findings to A01-A10, produce PASS/FAIL/PARTIAL table
+
+Output:
+- Findings with [VULN-...] numbering, CVSS 3.1 vector, file:line, vulnerable code, fixed code, references.
+- Use templates from reports/ if needed.

package/skills/cyberaudit/commands/audit-pci.md

@@ -0,0 +1,11 @@
+---
+description: PCI-DSS compliance check
+---
+PCI-DSS compliance check — /audit:pci
+
+1. Load shared/COMPLIANCE.md PCI
+2. Check card data not stored, encryption, logging, access control
+
+Output:
+- Findings with [VULN-...] numbering, CVSS 3.1 vector, file:line, vulnerable code, fixed code, references.
+- Use templates from reports/ if needed.

package/skills/cyberaudit/commands/audit-permissions.md

@@ -0,0 +1,11 @@
+---
+description: Permissions audit (mobile)
+---
+Permissions audit (mobile) — /audit:permissions
+
+1. Load mobile/vulnerabilities/PERMISSIONS.md
+2. Check unnecessary permissions, request at time of need, exported components
+
+Output:
+- Findings with [VULN-...] numbering, CVSS 3.1 vector, file:line, vulnerable code, fixed code, references.
+- Use templates from reports/ if needed.

package/skills/cyberaudit/commands/audit-react-native.md

@@ -0,0 +1,11 @@
+---
+description: React Native audit
+---
+React Native audit — /audit:react-native
+
+1. Load mobile/frameworks/REACT-NATIVE.md
+2. Check AsyncStorage, deep links, WebView XSS, JS bundle secrets
+
+Output:
+- Findings with [VULN-...] numbering, CVSS 3.1 vector, file:line, vulnerable code, fixed code, references.
+- Use templates from reports/ if needed.

package/skills/cyberaudit/commands/audit-react.md

@@ -0,0 +1,11 @@
+---
+description: React-specific audit
+---
+React-specific audit — /audit:react
+
+1. Load web/frameworks/REACT.md
+2. Check dangerouslySetInnerHTML with DOMPurify, env exposure, XSS in JSX
+
+Output:
+- Findings with [VULN-...] numbering, CVSS 3.1 vector, file:line, vulnerable code, fixed code, references.
+- Use templates from reports/ if needed.

package/skills/cyberaudit/commands/audit-rgpd.md

@@ -0,0 +1,11 @@
+---
+description: RGPD compliance check
+---
+RGPD compliance check — /audit:rgpd
+
+1. Load shared/COMPLIANCE.md GDPR
+2. Check privacy by design, minimal collection, encryption, retention, breach notification
+
+Output:
+- Findings with [VULN-...] numbering, CVSS 3.1 vector, file:line, vulnerable code, fixed code, references.
+- Use templates from reports/ if needed.

package/skills/cyberaudit/commands/audit-runtime.md

@@ -0,0 +1,11 @@
+---
+description: Runtime security audit (mobile)
+---
+Runtime security audit (mobile) — /audit:runtime
+
+1. Load mobile/vulnerabilities/RUNTIME-MOBILE.md
+2. Check root/jailbreak detection, anti-tamper, FLAG_SECURE
+
+Output:
+- Findings with [VULN-...] numbering, CVSS 3.1 vector, file:line, vulnerable code, fixed code, references.
+- Use templates from reports/ if needed.

package/skills/cyberaudit/commands/audit-secrets.md

@@ -0,0 +1,11 @@
+---
+description: Exposed secrets & credentials audit
+---
+Exposed secrets & credentials audit — /audit:secrets
+
+1. Load web/vulnerabilities/SECRETS.md
+2. Scan: API keys, tokens, private keys, .env committed, NEXT_PUBLIC_ secrets, comments, git history
+
+Output:
+- Findings with [VULN-...] numbering, CVSS 3.1 vector, file:line, vulnerable code, fixed code, references.
+- Use templates from reports/ if needed.

package/skills/cyberaudit/commands/audit-ssrf.md

@@ -0,0 +1,11 @@
+---
+description: SSRF audit
+---
+SSRF audit — /audit:ssrf
+
+1. Load web/vulnerabilities/SSRF.md
+2. Check URL fetch with user input, whitelist, block 169.254.169.254, internal IPs
+
+Output:
+- Findings with [VULN-...] numbering, CVSS 3.1 vector, file:line, vulnerable code, fixed code, references.
+- Use templates from reports/ if needed.

package/skills/cyberaudit/commands/audit-storage.md

@@ -0,0 +1,11 @@
+---
+description: Local storage security audit (mobile)
+---
+Local storage security audit (mobile) — /audit:storage
+
+1. Load mobile/vulnerabilities/STORAGE.md
+2. Check AsyncStorage with tokens, Keychain/Keystore usage, SQLite encrypted, logs
+
+Output:
+- Findings with [VULN-...] numbering, CVSS 3.1 vector, file:line, vulnerable code, fixed code, references.
+- Use templates from reports/ if needed.

package/skills/cyberaudit/commands/audit-vue.md

@@ -0,0 +1,11 @@
+---
+description: Vue.js-specific audit
+---
+Vue.js-specific audit — /audit:vue
+
+1. Load web/frameworks/VUE.md
+2. Check v-html with sanitize, template injection, env exposure
+
+Output:
+- Findings with [VULN-...] numbering, CVSS 3.1 vector, file:line, vulnerable code, fixed code, references.
+- Use templates from reports/ if needed.

package/skills/cyberaudit/commands/audit-xss.md

@@ -0,0 +1,11 @@
+---
+description: Cross-Site Scripting audit
+---
+Cross-Site Scripting audit — /audit:xss
+
+1. Load web/vulnerabilities/XSS.md
+2. Check dangerouslySetInnerHTML, innerHTML, v-html, Blade {!! !!}, URL javascript: validation, CSP header
+
+Output:
+- Findings with [VULN-...] numbering, CVSS 3.1 vector, file:line, vulnerable code, fixed code, references.
+- Use templates from reports/ if needed.

package/skills/cyberaudit/commands/audit-xxe.md

@@ -0,0 +1,11 @@
+---
+description: XXE audit
+---
+XXE audit — /audit:xxe
+
+1. Load web/vulnerabilities/XXE.md
+2. Check XML external entities disabled, no xxe in parser
+
+Output:
+- Findings with [VULN-...] numbering, CVSS 3.1 vector, file:line, vulnerable code, fixed code, references.
+- Use templates from reports/ if needed.

package/skills/cyberaudit/reports/EXECUTIVE-SUMMARY-TEMPLATE.md

@@ -182,7 +182,7 @@ DECISION REQUIRED
   Full report available : [Report reference]
   For any questions     : Use CyberAudit in Q&A mode
 
-  Generated by CyberAudit Skill v3.0 — LUNAIRE EDITION
+  Generated by CyberAudit Skill v3.1.5
   CONFIDENTIAL document — Management level only
 
 ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

package/skills/cyberaudit/reports/REPORT-TEMPLATE-CLOUD.md

@@ -0,0 +1,103 @@
+# ☁️ SECURITY AUDIT REPORT — CLOUD
+# Official CyberAudit Skill Template — Cloud
+
+═══════════════════════════════════════════════════════════════
+              REPORT HEADER
+═══════════════════════════════════════════════════════════════
+
+SECURITY AUDIT REPORT — CLOUD
+━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+
+Account/Project  : [ACCOUNT ID / PROJECT]
+Provider         : [AWS / GCP / Azure]
+IaC              : [Terraform / CloudFormation / None]
+Audit type       : Cloud Configuration Audit (CIS / OWASP Cloud)
+Audit level      : [Quick / Standard / Deep]
+Date             : [DATE]
+Auditor          : CyberAudit Intelligence v3.1.5
+Confidentiality  : 🔴 CONFIDENTIAL
+
+═══════════════════════════════════════════════════════════════
+              EXECUTIVE SUMMARY
+═══════════════════════════════════════════════════════════════
+
+OVERALL VERDICT: [🔴 CRITICAL / 🟠 HIGH / 🟡 MODERATE / 🟢 ACCEPTABLE]
+SECURITY SCORE: [XX]/100
+
+VULNERABILITY DASHBOARD
+  🔴 CRITICAL : [N] (public storage, wildcard IAM, open SG)
+  🟠 HIGH     : [N]
+  🟡 MEDIUM   : [N]
+  🟢 LOW      : [N]
+
+BUSINESS RISKS
+  → Data breach via public bucket
+  → Account takeover via IAM wildcard
+  → Ransomware via unencrypted snapshots
+
+IMMEDIATE ACTIONS
+  1. Block public access on [bucket]
+  2. Scope IAM role [role] from * to least privilege
+  3. Close SG 0.0.0.0/0:22 on [sg-id]
+
+═══════════════════════════════════════════════════════════════
+              AUDIT SCOPE
+═══════════════════════════════════════════════════════════════
+
+INCLUDED:
+  ✅ S3/GCS/Blob storage
+  ✅ IAM roles/policies/users
+  ✅ Security Groups / Firewall
+  ✅ Lambda / Cloud Run / Functions
+  ✅ CloudTrail / Audit Logs
+
+OUT OF SCOPE:
+  ⭕ On-prem, physical
+
+═══════════════════════════════════════════════════════════════
+              DETAILED FINDINGS
+═══════════════════════════════════════════════════════════════
+
+[VULN-CLOUD-001] — Public S3 Bucket with Sensitive Data
+Severity: 🔴 CRITICAL
+CVSS: 9.1 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
+CWE: CWE-284, CIS AWS 2.1.1
+File: terraform/s3.tf:12 / aws s3://app-backup
+
+Vulnerable:
+  bucket ACL public-read, policy Principal "*"
+
+Impact: Anyone on internet can list and download backups containing DB dumps.
+
+Fix: See CLOUD-REMEDIATION-LIBRARY.md — Public S3 Bucket
+
+[... repeat per finding grouped by severity]
+
+═══════════════════════════════════════════════════════════════
+              CIS BENCHMARK COMPLIANCE
+═══════════════════════════════════════════════════════════════
+
+  1. IAM — MFA, no wildcard : [PASS/FAIL]
+  2. Storage — no public buckets : [PASS/FAIL]
+  3. Logging — CloudTrail enabled : [PASS/FAIL]
+  4. Networking — no 0.0.0.0/0:22 : [PASS/FAIL]
+
+═══════════════════════════════════════════════════════════════
+              REMEDIATION PLAN
+═══════════════════════════════════════════════════════════════
+
+PHASE 1 — WEEK 1 (Critical)
+  □ VULN-CLOUD-001 public bucket
+  □ VULN-CLOUD-002 wildcard IAM
+
+PHASE 2 — WEEKS 2-4 (High)
+  □ IMDSv2 enforcement
+  □ S3 encryption
+
+PHASE 3 — MONTHS 2-3 (Medium)
+  □ Enable GuardDuty / flow logs
+  □ IaC scanning in CI
+
+CONCLUSION: [Go/No-Go]
+
+Report generated by CyberAudit v3.1.5 — Cloud Module

package/skills/cyberaudit/reports/REPORT-TEMPLATE-MOBILE.md

@@ -17,7 +17,7 @@ iOS Version      : [Deployment Target]
 Audit type       : Mobile Application Security Audit
 Audit level      : [Quick Scan / Standard / Deep / Red Team]
 Date             : [DATE]
-Auditor          : CyberAudit Intelligence v3.0 — LUNAIRE
+Auditor          : CyberAudit Intelligence v3.1.5
 Confidentiality  : 🔴 CONFIDENTIAL — Internal use only
 
 ═══════════════════════════════════════════════════════════════
@@ -404,7 +404,7 @@ FINAL PUBLICATION RECOMMENDATION:
   🟢 GO     — Application ready for publication
 
 ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
-Report generated by CyberAudit Skill v3.0 — LUNAIRE EDITION
+Report generated by CyberAudit Skill v3.1.5
 Aligned with OWASP MASVS 2.0 and OWASP Mobile Top 10
 This report is CONFIDENTIAL — Restricted distribution
 ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

package/skills/cyberaudit/reports/REPORT-TEMPLATE-WEB.md

@@ -14,7 +14,7 @@ Framework(s)    : [FRAMEWORK(S) AUDITED]
 Audit type      : Web Application Security Audit
 Audit level     : [Quick Scan / Standard / Deep / Red Team]
 Date            : [DATE]
-Auditor         : CyberAudit Intelligence v3.0
+Auditor         : CyberAudit Intelligence v3.1.5
 Confidentiality : 🔴 CONFIDENTIAL — Internal use only
 
 ═══════════════════════════════════════════════════════════════
@@ -216,7 +216,7 @@ Professional but direct tone.]
 [Final recommendation: Go / No-Go for production]
 
 ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
-Report generated by CyberAudit Skill v3.0 — LUNAIRE EDITION
+Report generated by CyberAudit Skill v3.1.5
 This report is CONFIDENTIAL. Restricted distribution.
 For any questions: use CyberAudit in Q&A mode
 ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━