skills.rest
valegrajales
valegrajalesCOMMUNITY
Explore all skills by this author →
GitHub

atv-security

Scan agentic config files and source code for OWASP Top 10 and STRIDE threats.

Updated Jun 4, 2026
Search Tags:#security audit#vulnerability scan#OWASP Top 10#application security#STRIDE threat model
One-click install
npx skills add https://github.com/valegrajales/agentic-retrieval-example --skill atv-security-valegrajales
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: atv-security
Source: https://github.com/valegrajales/agentic-retrieval-example/tree/main/.github/skills/atv-security
Command: npx skills add https://github.com/valegrajales/agentic-retrieval-example --skill atv-security-valegrajales

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill performs a thorough security audit on your project, scanning both agentic configuration files and application source code for potential vulnerabilities.

Core Features & Use Cases

  • Unified Security Audit: Scans agentic config files and application source code for security issues.
  • Comprehensive Analysis: Checks for secrets, permissions, hooks, and agent/skill configurations.
  • OWASP Top 10 + STRIDE Threat Model: Identifies OWASP Top 10 and STRIDE threats in the codebase.
  • Customizable Scopes: Run the audit on the entire project or specific parts like config, OWASP, STRIDE, or a specific path.

Quick Start

Run the security audit by typing /atv-security or /atv-security fix to fix identified issues.

Frequently Asked Questions about atv-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security audit on my application source code?▼

Run a security audit by typing the command to scan application source code and agentic config files. It identifies secrets, permissions, hooks, and agent configurations to detect OWASP Top 10 and STRIDE threats.

What is a STRIDE threat model analysis?▼

A STRIDE threat model analysis identifies spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege threats. This audit scans your application source code to find these vulnerabilities.

Can I scan specific directories instead of the entire project?▼

Yes, you can scan specific directories. The audit supports customizable scopes, allowing you to run checks on the entire project or target specific parts like config, OWASP, STRIDE, or a designated path.

Does the audit check agentic config files for security issues?▼

Yes, the audit checks agentic config files for security issues. It scans agent and skill configurations to identify exposed secrets, excessive permissions, and risky hooks alongside application source code.

How do I fix vulnerabilities identified during an OWASP Top 10 scan?▼

To fix vulnerabilities identified during an OWASP Top 10 scan, run the command with the fix argument. This instructs the audit to automatically resolve the identified security issues in your project files.

Related Skills

Explore More Software Engineering Skills→
kenhiakenhia

atv-security

Automate security audits for GitHub projects by scanning source code for vulnerabilities.

Community
Advanced
aaioneaaione
25

security-review

Identify and remediate security vulnerabilities across authentication, input handling, and API endpoints.

Community
Advanced
patriotnewsactivismpatriotnewsactivism
1

security-scan

Execute dependency, SAST, and privacy dataflow scans with prioritized findings.

Community
Intermediate
RIMTHAN-LABRIMTHAN-LAB
1

owasp-mobile-security-checker

Analyze Flutter applications for OWASP Mobile Top 10 vulnerabilities.

Official
Intermediate