Audit software projects across code, APIs, infrastructure, and CI/CD pipelines.
npx skills add https://github.com/ProgramadorBrasil/antigravity-skills --skill 007
Please help me install this Agent Skill. Skill: 007 Source: https://github.com/ProgramadorBrasil/antigravity-skills/tree/main/skills/007 Command: npx skills add https://github.com/ProgramadorBrasil/antigravity-skills --skill 007
Software security often fails due to ad-hoc reviews, lack of threat modeling, and inconsistent hardening practices. This Skill provides a rigorous six-phase workflow to identify, assess, and mitigate risks across code, configurations, and infrastructure to raise security posture.
Run a full-audit against your project directory to generate a security-verified report and scoring.
High-intent search queries and answers about installing and using this skill.
To perform a security audit, this Skill runs a six-phase workflow: surface mapping, threat modeling, checklist validation, red/blue playbooks, scoring, and final verdict. It reviews code, APIs, infrastructure, and CI/CD pipelines to generate a security-verified report.
Threat modeling identifies potential security risks using frameworks like STRIDE or PASTA. This Skill applies threat modeling to code, APIs, and infrastructure, creating structured checklists and red/blue team playbooks to guide software hardening and improve incident resilience.
Yes, you can improve incident response readiness for CI/CD pipelines using the included Red/Blue team playbooks. The Skill evaluates pipeline configurations and infrastructure, providing scoring and governance guidance to raise your security posture and incident resilience.
The best way to ensure compliance alignment is through a rigorous audit workflow with centralized references and playbooks. This Skill enforces consistent hardening practices and security checklists across modern stacks, evaluating code and infrastructure to maintain compliance.
No external security tools or dependencies are required to run this audit. The Skill operates independently using its own scripts and references to execute the six-phase process, mapping your attack surface and generating a final security score and verdict.
vlad-ryzhkovAudit Go backend repositories for API endpoints, infrastructure, and test coverage.
TurnaboutHeroCreate repeatable QA plans and test case templates for software releases.
BishopCodesAutomate web application security assessments with OWASP testing and browser automation.
huangwb8Identify and mitigate security risks through threat modeling and compliance checks.
