skills.rest
Space-Dinosaurs
Space-DinosaursOFFICIAL
Explore all skills by this author →
Website𝕏@SpaceDinosaurS6GitHub

agent-security-auditor

Identify security vulnerabilities in code changes using OWASP Top 10 and CWE patterns.

12|1|Updated Apr 7, 2026
Search Tags:#threat-modeling#code-review#security-audit#cwe#owasp-top-10#findings-report
One-click install
npx skills add https://github.com/Space-Dinosaurs/DinoStack --skill agent-security-auditor
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: agent-security-auditor
Source: https://github.com/Space-Dinosaurs/DinoStack/tree/main/.openclaw/skills/agent-security-auditor
Command: npx skills add https://github.com/Space-Dinosaurs/DinoStack --skill agent-security-auditor

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Specialized security reviewer for code changes that enables threat-model-driven security audits, producing structured findings and remediation guidance.

Core Features & Use Cases

  • Threat-model-based security analysis applying OWASP Top 10 and CWE patterns to code changes.
  • Produces structured findings reports with severity ratings and exact code locations.
  • Spawn prompts that specify files to audit, the security domain, and known mitigations; suitable for PR reviews and audits.
  • Supports integration with Git workflows and automated audits in CI.

Quick Start

Provide the changed files to audit and invoke the security auditor to generate a findings report.

Frequently Asked Questions about agent-security-auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a threat-model security audit on code changes?▼

To perform a threat-model security audit on code changes, provide the changed files to the auditor which applies OWASP Top 10 and CWE patterns to generate a structured findings report.

Can I use threat-model-driven analysis for pull request reviews?▼

Yes, threat-model-driven analysis is suitable for pull request reviews and audits, identifying security vulnerabilities in code changes by specifying files and security domains to generate findings.

What is a structured findings report for security vulnerabilities?▼

A structured findings report for security vulnerabilities details severity ratings, exact code locations, and remediation guidance, produced by analyzing code changes against threat models and CWE patterns.

Does the security auditor support automated audits in CI?▼

Yes, the security auditor supports integration with Git workflows and automated audits in CI by processing code changes to identify vulnerabilities and output remediation reports.

What security patterns are applied during a code review audit?▼

During a code review audit, OWASP Top 10 and CWE patterns are applied across code domains to identify security vulnerabilities and generate remediation guidance for developers.

How do I get remediation guidance for identified code vulnerabilities?▼

To get remediation guidance for identified code vulnerabilities, audit the changed files to generate a findings report that includes severity ratings and specific remediation steps based on threat-model analysis.

Related Skills

Explore More Software Engineering Skills→
Factory-AIFactory-AI
101

commit-security-scan

Automate security analysis of code changes with threat-model patterns.

Official
Advanced
erenisiklarerenisiklar

algorand-vulnerability-scanner

Detect 11 vulnerability patterns in Algorand TEAL/PyTeal smart contracts.

Community
Advanced
SchSebaSchSeba

review-engine

Automate code reviews by analyzing changes with security and performance criteria.

Community
Advanced
usermaumusermaum

security-pipeline

Detect security vulnerabilities in code changes using CWE and STRIDE methodologies.

Community
Advanced