ck:security

Audit codebases for STRIDE and OWASP security vulnerabilities.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/dungnt97/wallet-portal --skill ck-security-dungnt97
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ck:security
Source: https://github.com/dungnt97/wallet-portal/tree/main/claude/skills/ck-security
Command: npx skills add https://github.com/dungnt97/wallet-portal --skill ck-security-dungnt97

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Consolidated security auditing of codebases using a structured STRIDE + OWASP approach that yields a prioritized findings report and supports iterative fixes.

Core Features & Use Cases

  • Structured STRIDE + OWASP audit on a given scope for comprehensive risk coverage.
  • Severity-ranked findings report to guide remediation priorities.
  • Optional iterative fixes via the ck:autoresearch guard pattern to reduce residual risk.
  • Secret detection and dependency checks to surface credentials and vulnerable components.

Quick Start

Run /ck:security <scope> to audit a codebase for STRIDE and OWASP findings and generate a severity-ranked report, with optional iterative fixes using --fix.

Frequently Asked Questions about ck:security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security audit on my codebase using STRIDE and OWASP?

To audit a codebase, execute the scope command to identify STRIDE and OWASP vulnerabilities, producing a severity-ranked findings report detailing security risks and remediation guidance.

What does a STRIDE security audit include besides code vulnerabilities?

A STRIDE security audit includes dependency checks to surface vulnerable components and secret detection to identify exposed credentials, alongside structured OWASP analysis for comprehensive risk coverage.

Can I automatically fix vulnerabilities found during the security audit?

Yes, you can automatically fix vulnerabilities by applying iterative guard-based fixes using the autoresearch integration, reducing residual risk through guided remediation.

When should I use automated security auditing for my repositories?

Use automated security auditing for code repositories, build pipelines, and periodic security reviews to comprehensively identify and remediate vulnerabilities using structured methodologies.

Does the security audit require any external dependencies or tools?

No, the security audit operates without external dependencies, using internal references to perform scope resolution, STRIDE plus OWASP analysis, dependency checks, and secret detection.