skills.rest
duy-tung
duy-tungCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

ck:security

Automate STRIDE and OWASP security audits with red-team testing and auto-fixes.

Updated Jun 14, 2026
Search Tags:#security#audit#red-team#penetration-testing#vulnerability-discovery
One-click install
npx skills add https://github.com/duy-tung/claude-code-setup --skill ck-security-duy-tung
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ck:security
Source: https://github.com/duy-tung/claude-code-setup/tree/main/claude/skills/ck-security
Command: npx skills add https://github.com/duy-tung/claude-code-setup --skill ck-security-duy-tung

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates security audits and red-team testing for codebases, ensuring vulnerabilities are identified and addressed before they become a threat.

Core Features & Use Cases

  • Security Audit: Conducts a structured STRIDE + OWASP security audit on a given scope.
  • Red-Team Discovery: Iterates through multiple attacker personas for thorough testing.
  • Auto-Fix: Applies fixes iteratively to confirmed critical and high-severity findings.
  • Use Case: Before a release or major deployment, run a full security audit and red-team test to ensure code is secure.

Quick Start

Execute a security audit on the entire codebase with auto-fix enabled: /ck:security full --fix

Frequently Asked Questions about ck:security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate a security audit for my codebase before release?▼

To automate a security audit for your codebase, run a structured STRIDE and OWASP analysis over your code, dependencies, and environment configurations to identify and address vulnerabilities.

Can I automatically apply fixes to vulnerabilities discovered during penetration testing?▼

Yes, automated penetration testing can iteratively apply fixes to confirmed critical and high-severity findings, ensuring vulnerabilities are addressed immediately without manual patching.

What is red-team testing and how does it apply to vulnerability discovery?▼

Red-team testing for vulnerability discovery iterates through multiple attacker personas to thoroughly test your codebase, simulating distinct exploitation techniques to uncover hidden security flaws.

Does this security audit require any specific environment configurations?▼

Security audits require analysis of code, dependencies, and environment configurations, meaning you must provide access to your project's runtime environment setup and dependency manifests to accurately map threats.

What is the best way to perform a STRIDE and OWASP security audit on source code?▼

The best way to perform a STRIDE and OWASP security audit is automating the structured analysis across your entire codebase, enabling consistent threat modeling and rapid vulnerability discovery before major deployments.

Related Skills

Explore More Software Engineering Skills→
vanducngvanducng
5

security

Identify codebase vulnerabilities using STRIDE and OWASP threat modeling.

Community
Advanced
vnmoorthyvnmoorthy
2

canary

Monitor live apps for console errors and performance regressions post-deploy.

Community
Advanced
not-subhunot-subhu

security-scan

Orchestrate dependency audits, static application security testing, and privacy dataflow analysis.

Community
Advanced
AeonDaveAeonDave
15

lfisuite

Automate LFI vulnerability testing and exploitation to achieve remote code execution.

Community
Advanced