Identify and prioritize security findings using STRIDE and OWASP methodologies.
npx skills add https://github.com/hotriluan/alkana_web --skill ck-security
Please help me install this Agent Skill. Skill: ck:security Source: https://github.com/hotriluan/alkana_web/tree/main/.opencode/skills/ck-security Command: npx skills add https://github.com/hotriluan/alkana_web --skill ck-security
Security audits are time-consuming and error-prone. ck:security automates a structured STRIDE + OWASP assessment, producing a severity-ranked findings report to guide remediation.
Run /ck:security <scope> to audit a set of files, and add --fix to apply iterative remediation.
High-intent search queries and answers about installing and using this skill.
You can automate security audits by running the tool against a defined scope using glob patterns or a full scan. It resolves the scope, applies STRIDE analysis, and outputs a structured report ranking vulnerabilities by severity.
STRIDE analysis identifies and categorizes threat types within the codebase, while OWASP mapping correlates those findings to recognized vulnerability categories. This structured combination categorizes risks and produces a severity-ranked report to guide remediation.
Yes, you can apply iterative remediation by enabling the audit-with-fix mode. This applies structured safe fixes iteratively to the identified vulnerabilities using an automated guard pattern, rather than just generating an audit-only report.
Yes, the security audit includes dependency audits and secret detection. It references security best practices to scan dependencies and check for exposed secrets, incorporating these findings into the final structured vulnerability report.
When applying auto-remediation, you can enforce iteration limits to control the fix process. This constrains the automated guard pattern to a defined number of remediation steps, ensuring safe and predictable vulnerability fixes.
Yes, the tool supports an audit-only mode. This performs the full scope resolution, STRIDE analysis, and dependency scanning to generate a severity-ranked findings report without attempting any automated remediation steps.
arcasilesgroupMap codebase architecture and trace dependencies using Glob, Grep, and Read.
outfitter-devAudit codebases for security vulnerabilities and misconfigurations using OWASP and CWE mappings.
truongnatAudits code for OWASP Top 10 vulnerabilities, hardcoded secrets, and unsafe patterns.
4lermanPerform STRIDE threat modeling and vulnerability analysis with Python scripts.
