Audit application code for security vulnerabilities using STRIDE and OWASP Top 10.
npx skills add https://github.com/dthuy62/kollet-app --skill ck-security-dthuy62
Please help me install this Agent Skill. Skill: ck:security Source: https://github.com/dthuy62/kollet-app/tree/main/.opencode/skills/ck-security Command: npx skills add https://github.com/dthuy62/kollet-app --skill ck-security-dthuy62
This Skill helps teams identify security weaknesses in application code before release, turning ad hoc review into a structured audit with prioritized findings and practical remediation guidance.
Ask the security skill to audit the target scope and report the highest-risk findings with clear fix recommendations.
High-intent search queries and answers about installing and using this skill.
To audit application code for security vulnerabilities, this Skill applies STRIDE and OWASP Top 10 analysis to surface spoofing, tampering, and disclosure risks, while checking dependencies and hardcoded secrets to provide prioritized remediation guidance.
Finding hardcoded secrets and vulnerable dependencies is handled by this Skill through automated secret pattern detection and package vulnerability auditing, which identifies common high-impact issues alongside standard code review findings.
You can automatically fix security risks found during an OWASP Top 10 code review using the optional iterative fix mode, which applies targeted remediation with guard checks and verification between each change.
This security audit tool works on both full repositories and scoped file globs, making it suitable for targeted checks during authentication changes, data-handling reviews, and recurring compliance preparation.
STRIDE analysis identifies access-control risks by reviewing code through structured spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege lenses to surface prioritized security weaknesses.
You should use an automated code review for compliance checks during release preparation, authentication changes, and data-handling reviews to structure vulnerability findings and ensure recurring security audits are consistently evaluated.
jangtrinhPerform STRIDE and OWASP security audits and output severity-ranked vulnerability reports.
brainbrewlabsFix code scanner, security auditor, and linter issues with verified edits and reports.
darblexAudit codebases and infrastructure for security vulnerabilities.
Logos-LiberIdentifies security vulnerabilities in code, dependencies, and container images.
